The vulnerability of the ufshcd_update_rtc() function in the drivers/ufs/core/ufshcd.c file affects UFS-host controllers in Linux operating systems. This allows attackers to cause service failures.

The vulnerability of the ufshcdupdatertc function in the drivers/ufs/core/ufshcd.c module affects UFS-host controllers. In Linux operating systems, this vulnerability is related to incorrect resource locking. Exploitation of this vulnerability can allow an attacker to cause service failures...

The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdkfd component in Linux kernel relates to the mutual blocking of execution threads. Exploiting this vulnerability allows a perpetrator to cause service failures...

Vulnerability of components of the Linux operating system’s kernel, net/mlx5, which allows a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability allows attackers to cause service failures...

The vulnerability of the get_addr_generic() function in OpenVPN software allows a hacker to disclose IP addressing information and trigger a service failure.

The vulnerability of the getaddrgeneric function in OpenVPN software is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose IP addressing information and cause service failures...

Vulnerability of the build_unoptimized_policySettings() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_policy.c module – A driver for supporting Direct Rendering Infrastructure (DRI) in AMD graphics cards for Linux operating systems, which allows a hacker to trigger a service failure.

Vulnerability of the buildunoptimizedpolicySettings function in the drivers/gpu/drm/amd/display/dc/dml2/dml2policy.c module – Drivers that support Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems are vulnerable to permission handling errors. Exploiting this...

The vulnerability of the tcf_block_playback_offloads() function in the net/sched/cls_api.c module of the network/sched subsystem of the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the tcfblockplaybackoffloads function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service...

The vulnerability of the Office operating system HarmonyOS, which allows a hacker to trigger a service failure

The vulnerability of the Office operating system HarmonyOS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Call module of the HarmonyOS operating system, allowing a hacker to trigger a service failure

The vulnerability of the Call module of the HarmonyOS operating system is related to improper security checks for standard elements. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2025-59390

Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. In this case, the secret is generated using ThreadLocalRandom, which is not a crypto-graphically secure random number generator...

The vulnerability of the software platform’s JSON file processing mechanism, based on Git, allows a violator to trigger a service failure. This vulnerability enables a violator to cause a service failure.

The vulnerability of the software platform’s JSON file processing mechanism, based on Git, for collaborative code development in GitLab CE/EE, is related to unlimited resource distribution. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially craft...

The vulnerability of the web interface of the NeMo Agent ToolKit, a tool for creating, profiling, and optimizing AI agents, allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the web interface of the NeMo Agent ToolKit, a tool for creating, profiling, and optimizing AI agents, is related to the manipulation of requests on the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or...

Apache Druid’s Kerberos authenticator uses a weak fallback secret

Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. In this case, the secret is generated using ThreadLocalRandom, which is not a crypto-graphically secure random number generator...

GHSA-W88F-4875-99C8 Apache Druid’s Kerberos authenticator uses a weak fallback secret

Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. In this case, the secret is generated using ThreadLocalRandom, which is not a crypto-graphically secure random number generator...

CVE-2025-59390 Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.

Apache Druid’s Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. In this case, the secret is generated using ThreadLocalRandom, which is not a crypto-graphically secure random number generator...

CVE-2025-59390

Apache Druid (versions through 34.0.0 ) is vulnerable to a Weak Authentication flaw in its Kerberos authenticator. When the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set, the system uses a weak fallback secret generated by ThreadLocalRandom, which is ...

PT-2025-48133

Name of the Vulnerable Software and Affected Versions Apache Druid versions prior to 35.0.0 Description The Apache Druid Kerberos authenticator uses a weak fallback secret when the druid.auth.authenticator.kerberos.cookieSignatureSecret configuration is not explicitly set. The secret is generated...

The vulnerability in the `drivers/media/platform/qcom/iris/iris_core.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/media/platform/qcom/iris/iriscore.c module of the Linux operating system is related to improper resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990958 advisory. A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered i...

The vulnerability of the `update_qos_request()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the updateqosrequest function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the XMLToolMessage class of the langroid Python framework for application development allows a attacker to trigger a service failure or disclose protected information.

The vulnerability of the XMLToolMessage class in the langroid application development framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a malicious actor to cause service failures or expose sensitive information...