4419 matches found
EUVD-2025-206716
NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in versions 2.11.0 through 3.7.x in the ProtectedError handling logic, where object names are included in HTML error messages without proper...
The vulnerability of the print_wrapper_info() function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.
The vulnerability of the printwrapperinfo function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel multimedia device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...
The vulnerability of the ima_match_rules() function in the security/integrity/ima/ima_policy.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.
The vulnerability of the imamatchrules function in the security/integrity/ima/imapolicy.c module of the Linux kernel’s security subsystem is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to trigger service failures.
The vulnerability of embedded software developed by Qualcomm exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
DuoLungo: Usability Study of Duo 2FA
Multi-Factor Authentication MFA enhances login security by requiring multiple authentication factors. Its adoption has increased in response to more frequent and sophisticated attacks. Duo is widely used by organizations including Fortune 500 companies and major educational institutions, yet its...
CVE-2025-71190
In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...
CVE-2025-71190 dmaengine: bcm-sba-raid: fix device leak on probe
In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...
EUVD-2025-206585
In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...
CVE-2025-71190 dmaengine: bcm-sba-raid: fix device leak on probe
In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...
EulerOS Virtualization 2.10.1 : libssh (EulerOS-SA-2026-1127)
According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect...
The vulnerability of the Jose4j JWT library, related to improper protection of security tokens, allows a attacker to trigger a service failure.
The vulnerability of the Jose4j JWT library is related to improper protection of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Polkit authentication mechanism implemented by the InputPlumber utility in the Linux operating system allows a hacker to circumvent existing security restrictions, cause service failures, or gain increased privileges.
The vulnerability of the Polkit authentication mechanism in the Linux operating system’s InputPlumber utility is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions, cause service failures, o...
The vulnerability of the WLAN microprogramming software’s firmware in Qualcomm embedded chips allows a hacker to induce a service failure.
The vulnerability of WLAN microprogramming software’s firmware in Qualcomm embedded chips stems from operations that occur outside of the buffers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Johnson Controls iSTAR Configuration Utility security vulnerability
Johnson Controls iSTAR Configuration Utility is a software tool developed by Johnson Controls for configuring and managing iSTAR Controllers. Versions of the ICU 6.9.7 and earlier contain security vulnerabilities; these vulnerabilities stem from stack buffer overflows, which may lead to operating...
The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the Rust Binder driver for inter-process interaction in Linux kernel relates to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause service failures...
WordPress plugin User Activity Log security vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart LT distributed controllers, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software in Rockwell Automation’s ArmorStart LT distributed controllers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart LT distributed controllers, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.
The vulnerability of the microprogramming software in Rockwell Automation’s ArmorStart LT distributed controllers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...