CVE-2026-28196: Incomplete Cleanup

In JetBrains TeamCity before 2025.11.3 disabling versioned settings left a credentials config on disk...

Incomplete Cleanup

Overview Affected versions of this package are vulnerable to Incomplete Cleanup due to the improper cleanup of the streams map. An attacker can cause unbounded memory consumption by repeatedly creating and closing a large number of streams, leading to resource exhaustion. Remediation Upgrade...

The vulnerability of the optc1_enable_optc_clock() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the optc1enableoptcclock function in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003941)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003941 advisory. Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004262 advisory. Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information...

CVE-2021-22450

A component of the HarmonyOS has a Incomplete Cleanup vulnerability. Local attackers may exploit this vulnerability to cause memory exhaustion...

MAL-2026-142 Malicious code in rt-qa-sampler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d57d7fdf7de875c7da43a03defcfe1df8c66f3a72a0802585f903e5e4e4a19 The package rt-qa-sampler was found to contain malicious code. Source: ghsa-malware 7db994932160920a0a11f0ca0419898a6c0552e1f38b68ccf9bb6b59d72f98fb...

SIGB PMB SQL注入漏洞

SIGB PMB is an open source integrated library management system from SIGB. A SQL injection vulnerability exists in SIGB PMB version 7.4.6, which stems from insufficient cleanup of the id parameter in the ajax.php endpoint, which could lead to a SQL injection attack...

The vulnerability of the fs/jfs component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fs/jfs component in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Incomplete Cleanup

Overview Affected versions of this package are vulnerable to Incomplete Cleanup in the x/costaking process. An attacker can continue to accrue rewards without maintaining any actual BTC stake by exploiting a state inconsistency that occurs when a Finality Provider becomes inactive at the same blo...

The vulnerability of the Apache Struts software platform, related to incomplete cleanup of temporary or auxiliary resources, allows attackers to cause service failures.

The vulnerability of the Apache Struts software platform lies in the incomplete cleanup of temporary or auxiliary resources during the processing of multi-component requests. Exploiting this vulnerability can allow an attacker operating remotely to cause service failures...

The vulnerability of the binderTransactionBufferRelease() function in the drivers/android/binder.c module of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the binderTransactionBufferRelease function in the drivers/android/binder.c module of the Linux operating system’s kernel is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `ixgbevf_init_module()` function in the `drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c` file of the Linux kernel’s Ethernet driver support module allows a attacker to cause a service failure.

The vulnerability of the ixgbevfinitmodule function in the drivers/net/ethernet/intel/ixgbevf/ixgbevfmain.c file of the Linux kernel’s Ethernet driver framework is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a...

Siemens SIMATIC S7-1500 Incomplete Cleanup (CVE-2024-53164)

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch-q.qlen around qdisctreereducebacklog need to happen before a call to said function because otherwise it may fail to notify parent qdiscs when the child is about to become...

Siemens SIMATIC S7-1500 Incomplete Cleanup (CVE-2024-26835)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: set dormant flag on hook register failure This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

The vulnerability of the smcd_register_dev() function in the net/smc/smc_ism.c module, which implements kernel networking functions in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the smcdregisterdev function in the net/smc/smcism.c module, which implements networking functions for the Linux operating system’s kernel, is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a...

The vulnerability of the kvm_hypercall4() function in the arch/x86/include/asm/kvm_para.h module on the Linux operating system’s x86 kernel platform allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the kvmhypercall4 function in the arch/x86/include/asm/kvmpara.h module on the Linux operating system’s x86 kernel platform is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to access protected informatio...

The vulnerability of the automountfullpath() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the automountfullpath function fs/smb/client/namespace.c in the Linux kernel stems from incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC Devices Incomplete Cleanup (CVE-2024-50148)

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in protounregister As bnepinit ignore bnepsockinit's return value, and bnepsockinit will cleanup all resource. Then when remove bnep module will call bnepsockcleanup to cleanup sock's...

CVE-2025-6338

CVE-2025-6338 describes an incomplete cleanup in Qt Network's Schannel support on Windows, causing a potential Denial of Service over an extended period. Affected are Qt versions 5.15.0–6.8.3 and 6.9.0 before 6.9.2. Root cause: incomplete cleanup in Schannel handling. Impact stated as Denial of S...