The vulnerability of the `ceph_netfs_issue_read()` function in the `fs/ceph/addr.c` module, which is part of the Ceph distributed file system support for Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the cephnetfsissueread function in the fs/ceph/addr.c module of the Ceph distributed file system support module for Linux operating systems is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

JavaScript component vulnerability: Mozilla Firefox and Firefox ESR browsers’ WebAssembly feature allows attackers to trigger a service failure.

JavaScript component vulnerability: Mozilla Firefox and Firefox ESR browsers’ WebAssembly feature are related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2025-65503

Use after free in endpoint destructors in Redboltz asyncmqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between iocontext and endpoint objects...

CVE-2025-60914

Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /displaylogo endpoint...

The vulnerability of the tpm_pm_suspend() function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the tpmpmsuspend function in the drivers/char/tpm/tpm-interface.c file of the Linux kernel’s support for TPM-based alphanumeric devices is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a attacker to cause a service failure...

The vulnerability of the nilfs_ioctl_set_alloc_range() function in the fs/nilfs2/ioctl.c module of the NILFS2 file system support module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nilfsioctlsetallocrange function in the fs/nilfs2/ioctl.c module of the NILFS2 file system support in the Linux operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sync_file_merge() function in the drivers/dma-buf/sync_file.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the syncfilemerge function in the drivers/dma-buf/syncfile.c file of the Linux kernel is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the `usbnet_probe()` function of the `drivers/net/usb/usbnet.c` module of the Linux kernel’s USB driver support module allows a hacker to cause a service failure.

The vulnerability of the usbnetprobe function in the drivers/net/usb/usbnet.c module of the Linux kernel’s network adapter driver support framework is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the setBit() function in the include/trace/events/fscache.h module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the setBit function in the include/trace/events/fscache.h module of the Linux kernel’s firmware is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `nvmem_shift_read_buffer_in_place()` function in the `drivers/nvmem/core.c` file of the NVMEM device support driver for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the nvmemshiftreadbufferinplace function in the drivers/nvmem/core.c file of the NVMEM device support driver for the Linux operating system is related to the execution of operations outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the call_usermodehelper_exec() function in the kernel/umh.c module of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the callusermodehelperexec function in the kernel/umh.c module of the Linux operating system is related to errors in system configuration or settings. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __cpu_die() function in the arch/powerpc/kernel/smp.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the cpudie function in the arch/powerpc/kernel/smp.c module of the PowerPC platform support for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the grandparent() function in the drivers/cxl/core/port.c file of the CXL device support driver for the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the grandparent function in the drivers/cxl/core/port.c file of the CXL device support driver for the Linux operating system is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nj_release() function in the drivers/isdn/hardware/mISDN/netjet.c module of the driver support for mISDN hardware in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the njrelease function in the drivers/isdn/hardware/mISDN/netjet.c module of the mISDN support driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the spi_add_device() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.

The vulnerability of the spiadddevice function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gmc_v10_0_hw_fini() function in the drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c driver module allows a hacker to cause a service failure in AMD GPU-based Linux operating system Direct Rendering Infrastructure (DRI).

The vulnerability of the gmcv100hwfini function in the drivers/gpu/drm/amd/amdgpu/gmcv100.c driver module relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Code-Projects Library System SQL注入漏洞

Library System is a library system. Library System suffers from an SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Username in the file /index.php. The vulnerability can be exploited by an attacker to execute illegal SQL...

CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values...

kea security update

An update is available for kea. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list DHCP implementation from Internet Systems Consortium, Inc. that features fully...