The vulnerability in the bfd/elf.c component of the GNU Binutils development environment allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the bfd/elf.c component of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its...

The vulnerability of the `addImage` method in the library for creating PDF files (jsPDF) allows a hacker to trigger a service failure.

The vulnerability of the addImage method in the library used for creating PDF files from jsPDF is related to unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures...

wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures

...

SUSE CVE-2025-39845

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly synchronized when calling pdpopulatekernel. For 5-level paging,...

DEBIAN-CVE-2025-39845

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly synchronized when calling pdpopulatekernel. For 5-level paging,...

CVE-2025-39845 x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCHPAGETABLESYNCMASK and archsynckernelmappings Define ARCHPAGETABLESYNCMASK and archsynckernelmappings to ensure page tables are properly synchronized when calling pdpopulatekernel. For 5-level paging,...

CVE-2025-10456

A vulnerability was identified in the handling of Bluetooth Low Energy BLE fixed channels such as SMP or ATT. Specifically, an attacker could exploit a flaw that causes the BLE target i.e., the device under attack to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth...

CVE-2025-10456 Bluetooth: Semi-Arbitrary ability to make the BLE Target send disconnection requests

A vulnerability was identified in the handling of Bluetooth Low Energy BLE fixed channels such as SMP or ATT. Specifically, an attacker could exploit a flaw that causes the BLE target i.e., the device under attack to attempt to disconnect a fixed channel, which is not allowed per the Bluetooth...

The vulnerability of the AXIS Camera Station Pro software management software lies in the improper assignment of permissions for critical resources. This allows a intruder to gain access to delete any files they desire and to cause service failure.

The vulnerability of the AXIS Camera Station Pro software for video management is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an attacker to gain access to delete arbitrary files and cause service failures...

CVE-2025-54860

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-54860 Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-54860 Cognex In-Sight Explorer and In-Sight Camera Firmware Improper Restriction of Excessive Authentication Attempts

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-55068

CVE-2025-55068 affects Dover Fueling Solutions ProGauge MagLink LX4 Devices (and related MAGLINK LX products noted in connected sources). The vulnerability arises from the devices’ handling of Unix time values beyond a certain point, allowing a network-available attacker to manually adjust the sy...

The vulnerability of Apple Neural Engine (ANE) in operating systems such as iOS, iPadOS, tvOS, watchOS, visionOS, and macOS allows a hacker to trigger a service failure.

The vulnerability of the Apple Neural Engine ANE in operating systems such as iOS, iPadOS, tvOS, watchOS, visionOS, and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause system failures...

Cognex多款产品 安全漏洞

Cognex In-Sight Explorer and Cognex In-Sight Camera Firmware are both products of Cognex Corporation, U.S.A. Cognex In-Sight Explorer is a tool that has the ability to debug and program the software of its line of smart cameras.Cognex In-Sight Camera Firmware is firmware for a range of smart...

The vulnerability of the CoreAudio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows attackers to trigger a service failure.

The vulnerability of the CoreAudio component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from the operation of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the CoreMedia component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS systems allows attackers to trigger a service failure.

The vulnerability of the CoreMedia component in iOS, iPadOS, tvOS, watchOS, visionOS, and macOS stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the v1/completions interface of the LLM vLLM library allows a attacker to trigger a service failure.

The vulnerability of the v1/completions interface of the LLM library for working with large language models is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE CVE-2023-53340

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for known commands DEVX can issue a general command, which is not used by mlx5 driver. In case such command is failed, mlx5 is trying to collect the failure data, However, mlx5 doesn't...

UBUNTU-CVE-2023-53340

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Collect command failures data only for known commands DEVX can issue a general command, which is not used by mlx5 driver. In case such command is failed, mlx5 is trying to collect the failure data, However, mlx5 doesn't...