Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing dirty page tracking when the IOMMU is in non-consistent mode, which could lead to unrecoverable...

The vulnerability of the smb component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the smb component in Linux operating systems is related to the tracking of UNIX symbolic links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `load_global_roots_objectid` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the loadglobalrootsobjectid function in the Linux operating system’s kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the `build_sit_entries` function in the Linux operating system, which allows a hacker to trigger a service failure

Vulnerability of the buildsitentries function in the Linux operating system’s kernel, where resources are not properly cleaned or released. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...

The vulnerability of the ProFTPD FTP server, related to errors in the authentication process, allows attackers to manipulate data.

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

kernel: Linux kernel: Denial of Service via resource leak in SMB2 compound operations

A flaw was found in the Linux kernel. An inconsistent update of the reference count in the smb2compoundop function, particularly during memory allocation failures, could lead to resource leaks. A local attacker could exploit this to cause a Denial of Service DoS by exhausting system resources...

Educare Education Management System 安全漏洞

Educare Education Management System is a course management online platform from Educare Nigeria. A security vulnerability exists in the Educare Education Management System version 1.0 that stems from a failure to perform proper authorization checks, which could result in unauthorized access or...

Medium: glibc

Issue Overview: The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffe...

CVE-2025-55067

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

CVE-2025-55067 Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

CVE-2025-34155 Tibbo AggreGate Network Manager < 6.40.05 Login Functionality User Enumeration

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

The vulnerability of the coredns DNS server, related to incorrect conversion of numerical value types, allows attackers to cause service failures.

The vulnerability of the coredns DNS server is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow a remote attacker to cause service failures...

EUVD-2022-54827

In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when registerftracedirect fails: general protection fault, probably for non-canonical address \ 0x200000000000010: 0000 1 PREEMPT SMP...

The vulnerability of the btrfs_del inode_from_root() function in the fs/btrfs/inode.c module of the Linux kernel allows a attacker to cause a failure in the operation of the file system.

The vulnerability of the btrfsdel inodefromroot function in the fs/btrfs/inode.c module of the Linux kernel operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Podman software for managing and starting OCI containers lies in the improper resolution of file access links, which allows a malicious actor to trigger a service failure.

The vulnerability of the Podman software for managing and starting OCI containers is related to improper permission handling before accessing the file. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the QueryParser() function in the Rack module’s interpreter for the Ruby programming language allows a hacker to cause a service failure.

The vulnerability of the QueryParser function in the Rack module’s interpreter for the Ruby programming language is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Windows Local Session Manager component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions from a remote location...

Improper Input Validation

datahihi1/tiny-env is vulnerable to Improper Input Validation. The vulnerability is due to missing sanitization of characters, allowing attackers to inject comment text that can cause misconfigurations or authentication failures...

dotnet: .NET Denial of Service Vulnerability

A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operatio...