ALSA-2025:22063 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS CVE-2025-58364 For more details about the security issues, including the impact, a CVSS...

Oracle Linux 8 : cups (ELSA-2025-22063)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-22063 advisory. 1:2.2.6-64 - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS Tenable has extracted the preceding description...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2021-4467

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

The vulnerability of the rtnl_lock function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the rtnllock function in Linux operating systems is related to a freeze that occurs due to repeated locking of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the bpf_helper_changes_pkt_data function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpfhelperchangespktdata function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of AnyDesk’s remote access and management software lies in buffer overflow attacks in its dynamic memory. This allows attackers to trigger a service failure.

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the software for backup within the cloud platform Acronis Cyber Protect Cloud Agent stems from improper validation of syntax correctness of input data. This allows attackers to trigger service failures.

The vulnerability of the software for backup within the cloud platform Acronis Cyber Protect Cloud Agent is related to improper verification of syntax correctness of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of operating systems such as tvOS, iOS, iPadOS, macOS, watchOS, and visionOS lies in insufficient checking of unusual or exceptional states, allowing attackers to trigger service failures.

The vulnerability of operating systems such as tvOS, iOS, iPadOS, macOS, watchOS, and visionOS is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Reader.ReadResponse() function in the Go programming language, which allows a hacker to trigger a service failure

The vulnerability of the Reader.ReadResponse function in the Go programming language is related to an uncontrolled resource consumption resulting from incorrect connection handling during the creation of a response string. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the Java library for converting JSON-lib bean components lies in improper syntax validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Java library for converting JSON-lib bean components is related to improper syntax validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the sub_426EF8() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the MongoDB database management system, related to improper validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the MongoDB database management system is related to incorrect validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the UEFI microprogramming software in embedded platforms for artificial intelligence from NVIDIA, the Jetson Orin Series and Jetson Xavier Series, allows a hacker to trigger a system failure.

The vulnerability of the UEFI microprogramming system in embedded platforms for artificial intelligence, such as NVIDIA Jetson Orin Series and NVIDIA Jetson Xavier Series, is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service...

CVE-2025-27917

An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...

The vulnerability of component UL2 in Samsung’s Exynos 980, Exynos 990, Exynos 850, and Exynos W920 microprogramming systems allows a hacker to trigger a service failure.

The vulnerability of component UL2 in Samsung’s Exynos 980, Exynos 990, Exynos 850, and Exynos W920 microprogramming systems is related to an uncontrolled resource consumption due to a misordering of pointers. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to trigger a service failure.

The vulnerability in the Splunk Web platform for operational analysis in Splunk Enterprise relates to improper restrictions on XML links. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the formSchedule() function in D-Link DIR600L router software allows a hacker to induce a maintenance failure.

The vulnerability of the formSchedule function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the formAutoDetecWAN_wizard4() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formAutoDetecWANwizard4 function in the microprogrammed routing software of D-Link DIR600L lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow a malicious actor ...