CVE-2020-13805

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

CVE-2020-3623

kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software related to access segmentation flaws allows attackers to trigger service failures.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of Microprogrammed Graphics Processor Software for Intel Data Center GPU Flex 140 and Intel Data Center GPU Flex 170, related to access control deficiencies, allows attackers to trigger service failures.

The vulnerability of Intel Data Center GPU Flex 140 and Intel Data Center GPU Flex 170 graphics processors is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of Intel graphics processor microsoftware, related to insufficient checking of input data, allows a hacker to trigger a service failure.

The vulnerability of Intel graphics processor microsoftware is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software related to access segmentation flaws allows attackers to trigger service failures.

The vulnerability of Intel Arc and Intel Iris Xe graphics processor software is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to cause service failures...

The vulnerability of Intel graphics processor microsoftware relates to the execution of operations beyond buffer boundaries in memory. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of Intel graphics processor microsoftware is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause system failures...

389-ds-base security update

2.6.1-8 - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service rhel-9.6 2.6.1-7 - Bump version to 2.6.1-7 2.6.1-6 - Resolves: RHEL-86065 - Backport lib389 fixes required for WebUI rhel-9.6.z - Resolves: RHEL-80713 - Increased memory consumption...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an uninitialized source address parameter, which could lead to a routing connection failure...

The vulnerability of the Apache Tomcat application server arises from incomplete cleanup of temporary or auxiliary resources, allowing attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to cause service failures by sending a large number of specially crafted HTTP requests...

WordPress Sensei LMS plugin < 4.20.0 - Teacher+ Users Email Address Disclosure vulnerability

Teacher+ Users Email Address Disclosure vulnerability discovered by Li Xuhang in WordPress Plugin Sensei LMS versions 4.20.0...

WordPress WP ERP plugin < 1.13.4 - Custom+ Unauthorized Access to Terminated Employee Information vulnerability

Custom+ Unauthorized Access to Terminated Employee Information vulnerability discovered by Pedro Cuco Illex in WordPress Plugin WP ERP versions 1.13.4...

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Google Chrome’s DevTools component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s DevTools component is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Cisco Application Policy Infrastructure Controller, related to synchronization errors when using shared resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Application Policy Infrastructure Controller, a component of the information infrastructure management tool, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the server of the Zabbix universal monitoring system allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

Overly Restrictive Account Lockout Mechanism

Overview Affected versions of this package are vulnerable to Overly Restrictive Account Lockout Mechanism due to the failure in the lockout mechanism for LDAP users after multiple unsuccessful login attempts. An attacker can cause a denial of service by repeatedly attempting to log in with...

Mattermost Fails to Lockout LDAP Users After Repeated Login Failures

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

GHSA-QGWX-RFFP-6CX9 Mattermost Fails to Lockout LDAP Users After Repeated Login Failures

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...