32095 matches found
CVE-2025-64734
Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...
PT-2025-47242
Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...
Gallagher T-Series Reader 安全漏洞
The Gallagher T-Series Reader is a card reader in an access control system from Gallagher of New Zealand. A security vulnerability exists in the Gallagher T-Series Reader that stems from improper resource release and could lead to a denial of service attack...
[SECURITY] Fedora 41 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc41
Tokio-based file reader implementation for reqsign...
[SECURITY] Fedora 42 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc42
Tokio-based file reader implementation for reqsign...
HSEC-2023-0007 readFloat: memory exhaustion with large exponent
readFloat: memory exhaustion with large exponent Numeric.readFloat takes time and memory linear in the size of the number denoted by the input string. In particular, processing a number expressed in scientific notation with a very large exponent could cause a denial of service. The slowdown is...
CVE-2025-59505
CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability
...
CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability
...
kernel: ring-buffer: Validate the persistent meta data subbuf array
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...
Windows Smart Card Reader Elevation of Privilege Vulnerability
Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally...
[SECURITY] Fedora 43 Update: rust-reqsign-file-read-tokio-2.0.1-1.fc43
Tokio-based file reader implementation for reqsign...
The vulnerability of the Reader.ReadResponse() function in the Go programming language, which allows a hacker to trigger a service failure
The vulnerability of the Reader.ReadResponse function in the Go programming language is related to an uncontrolled resource consumption resulting from incorrect connection handling during the creation of a response string. Exploiting this vulnerability can allow a malicious actor to cause service...
Teamcenter Visualization WRL File Parsing Vulnerabilities
Siemens Teamcenter Visualization contains multiple file-parsing vulnerabilities in its WRL-file reader that affect versions V14.2, V14.3, V2312, and V2406. If a user opens a specially crafted malicious WRL file, the application may crash or allow arbitrary code execution in the context of the...
BIT-GOLANG-2025-61724 Excessive CPU consumption in Reader.ReadResponse in net/textproto
The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption...
BIT-GOLANG-2025-58183 Unbounded allocation when parsing GNU sparse map in archive/tar
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a...
Rigged Poker Games
The Department of Justice has indicted thirty-one people over the high-tech rigging of high-stakes poker games. In a typical legitimate poker game, a dealer uses a shuffling machine to shuffle the cards randomly before dealing them to all the players in a particular order. As set forth in the...
kernel: ethtool: check device is present when getting link settings
A flaw was found in ethtool in the Linux kernel, where sysfs reader getting link settings can attempt to read the device state on a device that is not present, leading to a crash...
Malicious code in rbx-reader-ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b8d14a0bd74bf3ed3daec6aa05cdff66d71efb652ea3727f5eee4812f39293 The package rbx-reader-ts was found to contain malicious code. Source: ghsa-malware e2cc8e418629e96adc1f49efc1c9e67a21f94eb0594d1e6a66ce25023f0afcc4...