PT-2023-7931 · Spring · Spring Boot

Name of the Vulnerable Software and Affected Versions: Spring Boot versions 2.7.0 through 2.7.17 Spring Boot versions 3.0.0 through 3.0.12 Spring Boot versions 3.1.0 through 3.1.5 Description: The issue is related to the Spring Boot framework, where an application can be vulnerable to a...

The vulnerability of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) endpoint security mechanism, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client endpoint security mechanism is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

The vulnerability of the implementation of TLS and SSL VPN client software from Cisco AnyConnect, which operates within the framework of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), allows a perpetrator to cause service interruptions.

The vulnerability of the implementation of TLS and SSL VPN client software for Cisco AnyConnect by microprogramming-based network interface controllers from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to improper cleaning or release of resources...

The vulnerability of the ASP.NET Core software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the 5G mobile communication network management software free5gc, related to improper cleaning or release of resources, allows a perpetrator to cause service interruptions.

The vulnerability of the 5G mobile communication network management software free5gc is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created PFCP message...

kernel: net: macvlan: fix memory leaks of macvlan_common_newlink

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...

PT-2023-7072

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description The issue is related to incorrect cleanup or release of resources in the ASP.NET Core platform, which can be exploited by a remote attacker to cause a denial of service. Recommendations ...

The vulnerability of the Core component of the Sun ZFS Storage Appliance Kit allows a intruder to trigger a service failure.

The vulnerability of the Core component of the Sun ZFS Storage Appliance Kit is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s kernel is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Brave Browser lies in its improper resource cleaning or release mechanisms, which allows a malicious actor to trigger a service failure.

The vulnerability of the Brave Browser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created HTML file...

kernel: mptcp: use the workqueue to destroy unaccepted sockets

In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after having refactored the passive socket initialization part: BUG: KASAN: use-after-free in tokenbucketbusy+0x253/0x260 Read o...

PT-2025-18824 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue was caused by the addition of rtnl lock to prevent a false data race, but it resulted in a deadlock. The deadlock...

The vulnerability of the web interface of Netgear WNDR3700 microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the web interface of Netgear WNDR3700 router software lies in improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Vulnerability of the Server component: The UDF component of the Oracle MySQL Server database management system, which allows attackers to perform DoS attacks.

The vulnerability of the Oracle MySQL Server database management system’s UDF component is related to improper resource cleanup. Exploiting this vulnerability can allow a malicious actor to carry out a DoS Denial-of-Service attack...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows attackers to perform DoS attacks.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to improper resource cleanup. Exploiting this vulnerability can allow a remote attacker to execute a DoS Denial-of-Service attack...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows attackers to perform DoS attacks.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to improper resource cleanup. Exploiting this vulnerability can allow a remote attacker to execute a DoS Denial-of-Service attack...

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to improper resource cleanup. Exploiting this vulnerability can allow a remote attacker to execute a DoS Denial-of-Service attack...

The vulnerability of HP display microprogramming software allows a hacker to disclose confidential data.

The vulnerability of HP display microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to disclose confidential data...

The vulnerability of the application software interface AllJoyn on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the AllJoyn application programming interface for Windows operating systems is related to improper resource cleanup. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Mixed Reality Developer Tools for Windows operating systems, which allows a hacker to trigger a service failure.

The vulnerability of Mixed Reality Developer Tools for Windows operating systems is related to improper resource cleanup. Exploiting this vulnerability can allow a malicious actor to cause service failures...