CVE-2025-32724

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2025-33068

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

Regular Expression Denial Of Service (ReDoS)

brace-expansion is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient handling of complex or nested patterns in regular expressions within the expand function of the file index.js, allows an attacker to remotely cause excessive resource consumption...

CVE-2025-42996

SAP MDM Server allows an attacker to gain control of existing client sessions and execute certain functions without having to re-authenticate giving the ability to access or modify non-sensitive information or consume sufficient resources which could degrade the performance of the server causing...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2025-1666)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A vulnerability in snifffeedorhtml and skipinsignificantspace functions may lead to a heap buffer...

Amazon Linux 2 : gnutls (ALAS-2025-2885)

The version of gnutls installed on the remote host is prior to 3.3.29-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2885 advisory. A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decodi...

Security Bulletin: IBM Cognos Analytics is affected by security vulnerabilities

Summary There are vulnerabilities in multiple Open Source Software OSS components consumed by IBM Cognos Analytics. Additionally, IBM Cognos Analytics is vulnerable to Cross Site Scripting XSS, Java Script Source Map and Denial of Service DOS vulnerabilities. This Security Bulletin relates only t...

EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2025-1633)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain...

EulerOS 2.0 SP13 : ruby (EulerOS-SA-2025-1625)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In the URI gem before 1.0.3 for Ruby, the URI handling methods URI.join, URImerge, URI+ have an inadvertent leakage of authentication credentials...

CVE-2025-33068

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

GO-2025-3746 Authorino Uncontrolled Resource Consumption vulnerability in github.com/kuadrant/authorino

Authorino Uncontrolled Resource Consumption vulnerability in github.com/kuadrant/authorino...

GO-2025-3747 Authorino Uncontrolled Resource Consumption vulnerability in github.com/kuadrant/authorino

Authorino Uncontrolled Resource Consumption vulnerability in github.com/kuadrant/authorino...

EUVD-2025-17740

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

EUVD-2025-17789

Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2025-3112

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length header to the webserver...

CVE-2025-3112

CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause Denial of Service when an authenticated malicious user sends manipulated HTTPS Content-Length header to the webserver...

CVE-2025-3112

CVE-2025-3112 describes an Uncontrolled Resource Consumption vulnerability in Schneider Electric Modicon Controllers (M241/M251/M258/LMC058/M262 family). The issue arises from handling an authenticated user-supplied manipulated HTTPS Content-Length header, enabling a Denial of Service. The CVSS m...

Windows Standards-Based Storage Management Service Denial of Service Vulnerability

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

CVE-2025-42996

CVE-2025-42996 affects SAP Master Data Management Server. The issue is a flaw in session control that lets an attacker gain control of existing client sessions and perform functions without re-authentication, potentially accessing or modifying non‑sensitive data or consuming resources and degradi...

PT-2025-24853

Name of the Vulnerable Software and Affected Versions Windows Standards-Based Storage Management Service affected versions not specified Description The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which can be exploited by an...