The vulnerability in the Firefox web browser and the Thunderbird email client arises from the simultaneous execution using a shared resource with incorrect synchronization, allowing an attacker to cause a service failure.

The vulnerability in the Firefox web browser and the Thunderbird email client is related to the simultaneous execution of processes using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of DRM/LIMA components in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of DRM/LIMA components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the dw-axi-dmac component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the dw-axi-dmac component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the tipc component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tipc component in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Go programming language, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Go programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the DRM/Radeon kernel components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/Radeon kernel components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the dedicated agent function in Cisco IOS XR software allows a hacker to induce a service failure.

The vulnerability of the dedicated agent function in Cisco IOS XR software is related to insufficient checks on the source of the communication channel. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the asynchronous network library Tornado, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the asynchronous network library Tornado is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Acquia DAM CMS system’s Drupal module, related to the manipulation of cross-site requests, allows attackers to perform CSRF attacks or cause service failures.

The vulnerability of Acquia DAM CMS system’s Drupal module is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack or cause service failures...

The vulnerability in the `drivers/media/platform/aspeed-video.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/media/platform/aspeed-video.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the nft_ct_expect_obj_eval() function in the net/netfilter/nft_ct.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftctexpectobjeval function in the net/netfilter/nftct.c component of the Linux operating system is related to improper checking of removed users. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the IBM Safer Payments security measure lies in its ability to allow unlimited distribution of resources, which enables a perpetrator to trigger a service failure.

The vulnerability of the IBM Safer Payments security tool is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Updatecli exposes Maven credentials in console output

Summary Private maven repository credentials leaked in application logs in case of unsuccessful retrieval operation. Details During the execution of an updatecli pipeline which contains a maven source configured with basic auth credentials, the credentials are being leaked in the application...

GitHub PAT written to debug artifacts

Impact summary In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that were exposed as environment variables to the workflow. Users with read access to th...

CVE-2025-24362 CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts

In some circumstances, debug artifacts uploaded by the CodeQL Action after a failed code scanning workflow run may contain the environment variables from the workflow run, including any secrets that were exposed as environment variables to the workflow. Users with read access to the repository...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system, which allows a hacker to trigger a service failure.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

SUSE CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...

CVE-2024-57936

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now. WQE software structure can hold only 6 now. Since the max send sge is reported as 13, the stack can give requests up to 13 SGEs. This is causin...