CVE-2024-34035: Uncontrolled Resource Consumption

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...

CVE-2024-34035

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...

CVE-2024-34036

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

CVE-2024-34035

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp...

CVE-2024-34036

A security vulnerability exists in O-RAN Near Realtime RIC I-Release where an attacker can disrupt the initial connection between a gNB and the Near RT-RIC . The issue is caused by uncontrolled resource consumption (CWE-400) when the system is inundated with a high volume of subscription requests...

CVE-2024-34035

A security vulnerability exists in O-RAN Near Realtime RIC H-Release involving the e2mgr component. An adversary can crash the e2mgr by flooding the system with a significant quantity of E2 Subscription Requests originating from an xApp . This issue is categorized under CWE-400 (Uncontrolled Reso...

CVE-2024-34036

An issue was discovered in O-RAN Near Realtime RIC I-Release. To exploit this vulnerability, an attacker can disrupt the initial connection between a gNB and the Near RT-RIC by inundating the system with a high volume of subscription requests via an xApp...

AZL-57111 CVE-2025-27144 affecting package cri-o 1.30.1-1

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

WordPress Doctor Appointment Booking Plugin <= 1.0.0 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Phat RiO - Fore-Z co.ltd in WordPress Plugin Doctor Appointment Booking versions = 1.0.0...

I-O Data Device UD-LT2 操作系统命令注入漏洞

The I-O Data Device UD-LT2 is a wireless router from I-O Data Device Japan. An operating system command injection vulnerability exists in I-O Data Device UD-LT2 1.00.008SE and prior versions, which stems from the presence of a special element that is not properly neutralized, which could allow an...

VulnCheck KEV: CVE-2024-9916

A vulnerability, which was classified as critical, has been found in HuangDou UTCMS V9. Affected by this issue is some unknown functionality of the file app/modules/ut-cac/admin/cli.php. The manipulation of the argument o leads to os command injection. The attack may be launched remotely. The...

CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10

CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10. A patched version of the package is available...

CVE-2023-0778 affecting package cri-o for versions less than 1.22.3-10

CVE-2023-0778 affecting package cri-o for versions less than 1.22.3-10. A patched version of the package is available...

PT-2025-11017

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue exists in the Linux kernel, specifically in the ibmvnic module. After sending a buffer to VIOS, it is invalid to access the skb memory because the VIOS can trigg...

WordPress WordPress Activity-o-meter plugin <= 1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WordPress Activity-o-meter versions = 1...

CVE-2024-51122: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Zertificon Z1 SecureMail Z1 CertServer v.3.16.4-2516-debian12 alllows a remote attacker to execute arbitrary code via the ST, L, O, OU, CN parameters...

CVE-2023-32277: Untrusted Pointer Dereference

Untrusted Pointer Dereference in I/O subsystem for some IntelR QAT software before version 2.0.5 may allow authenticated user to potentially enable information disclosure via local operating system access...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.17.16 security update

Red Hat OpenShift Container Platform release 4.17.16 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

Astra Linux – Vulnerability in libpod

A vulnerability was discovered in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage library can cause Podman, Buildah, and CRI-O to hang, resulting in a denial of service through an OOM kill when running a malicious image using an automatically assigned user...

RHEL 8 / 9 : OpenShift Container Platform 4.17.16 (RHSA-2025:1122)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:1122 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...