Vulnerability of the soup_multipart_new_from_message() function (soup-multipart.c) in the GNOME graphical interface library libsoup, which allows a hacker to cause a service failure

The vulnerability of the soupmultipartnewfrommessage function soup-multipart.c in the GNOME graphical interface library libsoup is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Vulnerability of the m_can_read_fifo() function in the drivers/net/can/m_can/m_can.c module – The CAN device driver support in the Linux operating system’s kernel allows a hacker to cause service failure.

Vulnerability of the mcanreadfifo function in the drivers/net/can/mcan/mcan.c module – The Linux kernel’s CAN device driver has a vulnerability related to improper memory release before deleting the last pointer „memory leak“. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the IPsec IKE service in the FortiOS operating system allows a attacker to induce a service failure.

The vulnerability of the IPsec IKE service in the FortiOS operating system is related to a numerical overflow condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability of the hugetlb component of the try_get_folio() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hugetlb component in the trygetfolio function of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the sched_ext component of the pick_task_scx function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the schedext component in the picktaskscx function of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of Cisco IOS XR routers in Cisco ASR 9000 systems, related to insufficient validation of input data, allows attackers to trigger service interruptions.

The vulnerability of Cisco IOS XR routers in the Cisco ASR 9000 family is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment, related to unlimited resource distribution, allows attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2025-23186

CVE-2025-23186 affects SAP NetWeaver Application Server ABAP. An authenticated attacker can craft an RFC request to restricted destinations, exposing credentials for a remote service and potentially fully compromising that remote service. Root cause cited in sources is improper access control aro...

The vulnerability of the SIEM system testing tool Kraken Stress Testing Toolkit lies in the reading beyond the buffer in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Internet Key Exchange Protocol Daemon (iked) in Juniper Networks’ Junos OS-based routers of the SRX, MX-SPC3, and NFX350 series allows a attacker to cause service interruptions.

The vulnerability of the Internet Key Exchange Protocol Daemon iked in Juniper Networks’ Junos OS-based routers of the SRX, MX-SPC3, and NFX350 series is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruption...

The vulnerability of the Juniper Networks Junos OS Evolved operating system’s extraction service allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS Evolved operating system-based filtering services is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

The vulnerability of the sqlgvec_upd component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlgvecupd component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the `dc_elt_size` component in the virtuoso-opensource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dceltsize component in the virtuoso-opensource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to remotely cause service failures by uploading a specially created malware file...

The vulnerability of the mod_dav_svn function in Apache Subversion software allows a hacker to induce a service failure.

The vulnerability of the moddavsvn function in Apache Subversion relates to a lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

The vulnerability of the __cld_pipe_inprogress_downcall() function in the fs/nfsd/nfs4recover.c module, which supports the Network File System in Linux kernels, allows a attacker to cause a service failure.

The vulnerability of the cldpipeinprogressdowncall function in the fs/nfsd/nfs4recover.c module, which is part of the NFS network file system support in Linux kernels, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of Eclipse Jetty servlet containers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to uncontrolled resource consumption in the ThreadLimitHandler.getRemote function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Linux operating system’s thermal core component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s thermal kernel component is related to errors in resource management in the procthermalpciremove function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Cisco AnyConnect VPN server’s microprogramming software in Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways allows a intruder to trigger a service failure.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateways is related to a reallocation of memory. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially...

The vulnerability of the microprogramming software on Intel Server Board M50FCP and Intel Server Board D50DNP, related to an error in handling exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the microprogramming software on Intel Server Board M50FCP and Intel Server Board D50DNP is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...