The vulnerability of the Gstreamer multimedia framework, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

The vulnerability in the Firefox web browser relates to the insufficient elimination of certain elements in the request, which allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the microprogrammed software of Zyxel series XGS2220, XMG1930, and XS1930 switches lies in the insufficient handling of exceptional states, which allows attackers to trigger service failures.

The vulnerability of the microprogrammed software of Zyxel’s XGS2220, XMG1930, and XS1930 series switches is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the software for developing and optimizing multimedia applications, Intel oneVPL GPU, allows a hacker to trigger a service failure.

The vulnerability of the software for developing and optimizing multimedia applications using Intel oneVPL GPUs is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the Windows Message Queuing system allows a perpetrator to cause a service failure.

The vulnerability of Windows’ Message Queuing system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the CMPapp component in the Codesys industrial automation software suite allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CMPapp component in the Codesys industrial automation software suite relates to the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause system failures or execute arbitrary code...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

CVE-2023-39386

CVE-2023-39386 affects Huawei HarmonyOS’s PMS module where input parameters are not strictly verified. The vulnerability may cause newly installed apps to fail to restart if exploited. The CVE has a high impact on availability (per CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is listed wit...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a attacker to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the sips component in macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the sips component in macOS operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause system failures...

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Microsoft Visual Studio, a software development tool, and the Microsoft.NET Framework, a software platform, is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the skcipher_recvmsg function in the crypto/algif_skcipher.c file of Linux operating system kernels allows a hacker to cause a service failure.

The vulnerability of the skcipherrecvmsg function in the Linux operating system’s kernel code is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ML lifecycle management platform arises from the lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary commands or trigger service failures.

The vulnerability of the MLflow model lifecycle management platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow an attacker to execute arbitrary commands or cause service failures...

The vulnerability of the libxpc library in iOS operating systems, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows a hacker to trigger a service failure.

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to errors in processing input data. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of Google Chrome’s Sandbox component allows a violator to gain unauthorized access to protected information, compromise its integrity, or cause service failures.

The vulnerability of Google Chrome’s Sandbox component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, compromise its integrity, or cause service failures...

PT-2025-41076

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc7 for upstream min debug 2023 06 28 17 02 Description The Linux kernel contains an issue in the net/mlx5e module where the RTNL lock is not held when needed before calling xdp set features. This can occur...

The vulnerability of the phpMyFAQ web application lies in the absence of a mechanism to neutralize certain elements. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the phpMyFAQ web application is related to the absence of element neutralization mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially crafted CSV file...

The vulnerability of CODESYS software products, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the use of a regular expression with inefficient computational complexity, allowing attackers to trigger service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service...

The vulnerability of the SAP SQL Anywhere relational database management system lies in the improper assignment of permissions to critical resources. This allows a perpetrator to trigger a service failure or cause other adverse effects.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...