CVE-2025-2125

A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovantemarcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of...

Control iD RHiD 安全漏洞

Control iD RHiD is a complete system from Control iD that allows point computing in the cloud. A security vulnerability exists in Control iD RHiD version 25.2.25.0, which stems from an incorrect manipulation of the parameter nsr can lead to improper control of resource identifiers...

CVE-2025-1642

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiat...

Benner Connecta 安全漏洞

Benner Connecta is a cloud connectivity platform from Benner Inc. bringing greater security and optimization to authorization and e-invoicing processes. A security vulnerability exists in Benner Connecta version 1.0.5330 that stems from improper control of resource identifiers and could allow...

Benner ModernaNet 安全漏洞

Benner ModernaNet is a diagnostic center application from Benner. A security vulnerability exists in Benner ModernaNet version 1.1.0 and prior versions that stems from improper control of resource identifiers and could allow remote attacks...

CVE-2025-1575

CVE-2025-1575 affects Harpia DiagSystem 12. The vulnerability lies in the file /diagsystem/PACS/atualatendimento_jpeg.php where manipulation of the cod/codexame argument leads to improper control of resource identifiers. It is possible to launch the attack remotely, and public exploitation has be...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the s390/cio components of Linux kernel, which allow a hacker to trigger a service failure

The vulnerability of the s390/cio components of Linux operating system kernels is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i915_gem_object_is_shrinkable() function in the DRM driver (drivers/gpu/drm/i915/gem/i915_gem_object.h) of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the i915gemobjectisshrinkable function in the DRM driver drivers/gpu/drm/i915/gem/i915gemobject.h of the Linux kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow a hacker to cause service failures...

UBUNTU-CVE-2024-45341

A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs...

CVE-2025-0625

A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of the component Attachment Handler. The manipulation leads to improper control of resource identifiers. It is possible to initiate the attack remotely. The...

ROS-20250117-07

A vulnerability in the dmaengine component of the Linux operating system kernel is related to the transfer of private resources. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the powerpc/fixmap component of the Linux kernel is related to...

CVE-2025-22828

CloudStack users can add and read comments annotations on resources they are authorised to access. Due to an access validation issue that affects Apache CloudStack versions from 4.16.0, users who have access, prior access or knowledge of resource UUIDs can list and add comments annotations to suc...

The vulnerability of the Netfilter component in the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the Netfilter component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability allows an attacker to enhance their privileges...

Configuring a proxy in a stream context might allow for CRLF injection in URIs

...

The vulnerability of the iopt_area_split() function in the iommufd component of Linux operating systems allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the ioptareasplit function in the iommufd component of Linux operating systems is related to the use of memory after its release, due to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to gain unauthorized access to confidential information

The vulnerability of the Linux operating system’s crypto kernel component is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the system...

The vulnerability of the mhi component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to confidential information.

The vulnerability of the mhi component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information within the system...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS by a hash flooding attack, due to inefficient array processing when handling URI parts. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...