CVE-2025-0980 JSON RPC authentication bypass in Nokia SR Linux

Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...

PT-2026-1935

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.77 Description RustFS is a distributed object storage system built in Rust. A malformed gRPC GetMetrics request can cause the get metrics function to fail during deserialization of metric...

CVE-2026-21452

MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parses extension headers lazily, it later...

The vulnerability of the Express adapter, the React Router routing library, and the React framework in the Remix framework allows attackers to induce a service failure.

The vulnerability of the Express adapter related to the React Router routing library in the Remix framework is linked to shortcomings in HTTP request handling. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the SAP NetWeaver software integration platform, related to uncontrolled resource consumption, allows a perpetrator to cause service interruptions.

The vulnerability of the SAP NetWeaver software integration platform is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Rust programming language library for interacting with the SSH protocol, which allows a hacker to cause a service failure.

The vulnerability of the Rust programming language’s Russh library for interacting with the SSH protocol is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of IBM WebSphere Application Server application servers, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the IBM WebSphere Application Server application server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices’ web servers allows a hacker to cause service interruptions.

The vulnerability of Zyxel 4G LTE/5G NR CPE and DSL/Ethernet CPE network devices, which run on microprogramming software, is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the MySQL Server, the database management system optimizer, allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system optimizer is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL database management system’s server allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the metadata processing library in multimedia files. ExifTool, a software platform based on Git, is used for collaborative code development on GitLab. This vulnerability allows a hacker to cause a service failure.

The vulnerability of the ExifTool software library for processing metadata in multimedia files is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the MySQL Server component of the database management system allows a hacker to cause a service failure.

The vulnerability of the MySQL Server database management system component lies in its unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.

The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Consul and Consul Enterprise service configuration tool, which involves unlimited distribution of resources, allows a perpetrator to cause service failures.

The vulnerability of the Consul and Consul Enterprise service configuration tools is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the MongoDB database management system, related to the use of memory after it is freed, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in Windows operating systems is related to a significant loss of functionality. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

CVE-2025-42874 Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...