ROS-20260128-73-0020

A vulnerability in the net/ipv4/ipgre.c and net/ipv6/ip6gre.c modules of the Linux operating system kernel is related to resource management errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260128-73-0011

A vulnerability in the arm64 component of the Linux operating system kernel is related to resource management errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

NVIDIA Display Driver Resource Management Vulnerability

NVIDIA Display Driver is a graphics driver developed by NVIDIA Corporation. NVIDIA Display Driver has a resource management vulnerability that stems from the reuse of resources after they are released. This vulnerability may lead to code execution, privilege escalation, data corruption, denial of...

NVIDIA vGPU resource management error vulnerability

NVIDIA vGPU is a virtual GPU technology developed by NVIDIA Corporation in the United States. NVIDIA vGPU has a resource management vulnerability, which stems from issues with the virtual GPU manager regarding reusing resources after release. This vulnerability may lead to code execution, privile...

Suricata resource management error vulnerability

Suricata is a network IDS, IPS, and NSM engine developed by the Open Information Security Foundation. Versions of Suricata prior to 8.0.3 and 7.0.14 contained a resource management vulnerability. This vulnerability stemmed from an unsigned integer overflow that could occur when generating too man...

Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL.

Summary Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL 7 on Cloud Pak for Data 4.8 and earlier Vulnerability Details CVEID:CVE-2023-45853 DESCRIPTION: MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long...

CVE-2026-24035

Horilla is a free and open source Human Resource Management System HRMS. An Improper Access Control vulnerability exists in Horilla HR Software starting in version 1.4.0 and prior to version 1.5.0, allowing any authenticated employee to upload documents on behalf of another employee without prope...

Trimble SketchUp resource management error vulnerability

Trimble SketchUp is a 3D modeling software developed by Trimble in the United States. It is designed for architects, urban planning experts, producers, game developers, and professionals in related fields. Trimble SketchUp has a resource management vulnerability that stems from the lack of...

ALGO 8180 IP Audio Alerter Resource Management Vulnerability

ALGO 8180 IP Audio Alerter is an IP speaker developed by ALGO Corporation. The ALGO 8180 IP Audio Alerter has a resource management vulnerability, which stems from the lack of validation for the existence of objects during the processing of SIP calls. This vulnerability may lead to reuse after...

CVE-2026-24039

Horilla HRMS (v1.4.0) contains an improper access-control flaw on the document-approval endpoint, allowing low-privilege users to self-approve their own uploaded documents. This weak server-side authorization check enables employees to alter admin-reserved state. The issue is fixed in v1.5.0. Aff...

EUVD-2026-4220

Horilla is a free and open source Human Resource Management System HRMS. Version 1.4.0 has Improper Access Control, allowing low-privileged employees to self-approve documents they have uploaded. The document-approval UI is intended to be restricted to administrator or high-privilege roles only;...

CVE-2026-24038

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

EUVD-2026-4218

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the hasxss function attempts to block XSS by matching input against a set of regex patterns. However, the regexes are incomplete and context-agnostic, making them easy to bypass. Attackers are able to...

CVE-2026-24036 Horilla Exposes Unpublished Job Disclosures through Unauthenticated API

Horilla is a free and open source Human Resource Management System HRMS. Versions 1.4.0 and above expose unpublished job postings through the /recruitment/recruitment-details// endpoint without authentication. The response includes draft job titles, descriptions and application link allowing...

CVE-2026-24034 Horilla has File Upload XSS

Horilla is a free and open source Human Resource Management System HRMS. In versions prior to 1.5.0, a cross-site scripting vulnerability can be triggered because the extension and content-type are not checked during the profile photo update step. Version 1.5.0 fixes the issue...

CVE-2026-24010 Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover

Horilla is a free and open source Human Resource Management System HRMS. A critical File Upload vulnerability in versions prior to 1.5.0, with Social Engineering, allows authenticated users to deploy phishing attacks. By uploading a malicious HTML file disguised as a profile picture, an attacker...

PT-2026-3914

Name of the Vulnerable Software and Affected Versions Horilla version 1.4.0 Description Horilla, a Human Resource Management System HRMS, contains a flaw in its two-factor authentication implementation. Specifically, the OTP handling logic has a flawed equality check. When an OTP expires, the...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A resource management error vulnerability exists in Dell PowerScale OneFS that stems from improper allocation of critical resource privileges and can be exploited...

Cisco IEC6400 Wireless Backhaul Edge Compute Software: Resource Management Error Vulnerability

Cisco IEC6400 Wireless Backhaul Edge Compute Software is a system firmware for edge computing devices developed by the American company Cisco. There is a resource management vulnerability in Cisco IEC6400 Wireless Backhaul Edge Compute Software. This vulnerability stems from the lack of effective...

ROS-20260120-73-0008

A vulnerability in the drm/amd/display component of the Linux kernel is related to resource management errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...