SUSE CVE-2025-5024

A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer bei...

Vulnerabilities of the functions check_session_id(), smb2_check_user_session(), smb2_sess_setup(), smb2_session_logoff(), smb3_decrypt_req(), ksmbd_session_lookup(), ksmbd_session_lookup_slowpath(), and ksmbd_get_encryption_key() in the Linux operating system kernel, allowing a hacker to cause a service failure.

The vulnerabilities of the functions checksessionid, smb2checkusersession, smb2sesssetup, smb2sessionlogoff, smb3decryptreq, ksmbdsessionlookup, ksmbdsessionlookupslowpath, and ksmbdgetencryptionkey in the Linux operating system are related to improper locking mechanisms. Exploiting these...

The vulnerability of the Inedo ProGet package management system lies in its ability to bypass the authentication process by using an alternative path or channel. This allows a perpetrator to cause a service failure or disclose protected information.

The vulnerability of the Inedo ProGet package management system relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to cause service failures or disclose protected information...

The vulnerability of MediaTek’s Bluetooth driver software allows a hacker to trigger a service failure.

The vulnerability of the Bluetooth driver for Microprogramming Software MediaTek chips is related to pointer assignment errors. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerabilities of the functions nft_pipapo_get(), nft_pipapo_activate(), and nft_pipapo_remove() in the Linux operating system allow a hacker to trigger a service failure.

The vulnerabilities of the nftpipapoget, nftpipapoactivate, and nftpipaporemove functions in the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

PT-2025-35971

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to file corruption checks within the JFS filesystem. A corrupted file with a negative i size value can be created on disk. Without a check during...

The vulnerability of the SolidWall WAF, related to security flaws, allows attackers to trigger a service failure.

The vulnerability of the SolidWall WAF lies in the deficiencies of its security mechanisms. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerabilities of components of Linux operating system kernels’ mm/uffd module, allowing attackers to cause service failures

The vulnerability of the mm/uffd components in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Elasticsearch search engine, related to the unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the Elasticsearch search engine, related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted SQL queries...

WordPress Offsprout Page Builder plugin 2.2.1-2.15.2 - Authenticated (Contributor+) Privilege Escalation via permission_callback Function

Authenticated Contributor+ Privilege Escalation via permissioncallback Function vulnerability discovered by kr0d in WordPress Plugin Offsprout Page Builder versions 2.2.1-2.15.2...

Mattermost fails to properly enforce access control restrictions for System Manager roles

Mattermost versions 10.7.x = 10.7.0, 10.5.x = 10.5.3, 9.11.x = 9.11.12 fails to properly enforce access control restrictions for System Manager roles, allowing authenticated users with System Manager privileges to view team details they should not have access to via direct API requests to team...

The vulnerability of the ovl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ovl component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of VideoGrace video conference software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of VideoGrace video conferencing software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted requests...

The vulnerability of Nomad application orchestrators, related to incorrect input data validation, allows attackers to trigger service failures.

The vulnerability of Nomad application orchestrators is related to improper validation of input data. Exploiting this vulnerability can allow an attacker who operates remotely to cause service failures...

The vulnerability of VideoGrace video conference software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of VideoGrace video conferencing software is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

SUSE CVE-2025-31947

Mattermost versions 10.6.x = 10.6.1, 10.5.x = 10.5.2, 10.4.x = 10.4.4, 9.11.x = 9.11.11 fail to lockout LDAP users following repeated login failures, which allows attackers to lock external LDAP accounts through repeated login failures through Mattermost...

The vulnerability of the IBM Security Verify Bridge software lies in the modification of assumed immutable data, allowing attackers to write arbitrary files or trigger service failures.

The vulnerability of the IBM Security Verify Bridge software is related to changes in the assumed immutable data. Exploiting this vulnerability could allow an attacker to write arbitrary files or cause service failures...

The vulnerability of theOTP library set in the Erlang programming language lies in the lack of control over the data entered by users. This allows attackers to trigger a service failure.

The vulnerability of theOTP library in the Erlang programming language is related to the lack of control over the data entered by users. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Redis database management system server, which allows a hacker to cause a service failure

The vulnerability of the Redis database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

GO-2025-3692 Mattermost Fails to Lockout LDAP Users After Repeated Login Failures in github.com/mattermost/mattermost-server

Mattermost Fails to Lockout LDAP Users After Repeated Login Failures in github.com/mattermost/mattermost-server...