CVE-2025-14777

Keycloak vulnerability CVE-2025-14777 is an IDOR in admin API endpoints for authorization resource management, affecting ResourceSetService and PermissionTicketService. The backend uses resourceId for DB lookups while authorization checks compare the resourceServer (client) ID provided in the req...

PT-2025-51367

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A broken access control issue was identified in Keycloak’s admin API endpoints related to authorization resource management, specifically within the ResourceSetService and...

Keycloak 安全漏洞

Keycloak is an open source identity and access management solution from Keycloak Open Source. A security vulnerability exists in Keycloak that stems from improper access control of the Authorized Resource Management API endpoint, which could result in unauthorized deletion or update of resources...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc USA. A resource management error vulnerability exists in versions of Google Chrome prior to 143.0.7499.147, which stems from reuse of the WebGPU after release and can lead to heap corruption...

Flexense SyncBreeze 资源管理错误漏洞

Flexense SyncBreeze is a file synchronization and backup tool from Flexense. A resource management error vulnerability exists in Flexense SyncBreeze version 15.2.24, which stems from a denial-of-service vulnerability in the login authentication mechanism that could cause the service to crash...

Tornado 资源管理错误漏洞

Tornado is a Python web framework and asynchronous networking library from the Chinese Tornado Technology Tornado community. The library scales to thousands of open connections through the use of non-blocking network I/O, making it well suited for long time polling, WebSocket and other applicatio...

Servify Express 资源管理错误漏洞

Servify Express is an express parcel form server by the individual developer Aaron doran. A resource management error vulnerability exists in Servify Express versions prior to 1.2 that stems from the Express server not setting a JSON parsing size limit, which could lead to a denial of service...

whisper.cpp 资源管理错误漏洞

whisper.cpp is a C language library open-sourced by ggml. A resource management error vulnerability exists in whisper.cpp version 1.8.2, which stems from a post-release reuse of the function readaudiodata in file /whisper.cpp/examples/common-whisper.cpp...

Microsoft Outlook Resource Management Error Vulnerability

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A security vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to remotely execute code...

SourceForge MinaliC Webserver 资源管理错误漏洞

SourceForge MinaliC Webserver is a SourceForge open source web service program. A resource management error vulnerability exists in SourceForge MinaliC Webserver version 2.0.0, which stems from improper handling of oversized GET requests and could lead to a denial of service attack...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from a post-release reuse vulnerability that stems from post-release reuse in the password manager. An attacker can exploit this vulnerability to perform a sandbox escape...

EUVD-2023-60145

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Drop aux devices together with DP controller Using devres to depopulate the aux bus made sure that upon a probe deferral the EDP panel device would be destroyed and recreated upon next attempt. But the struct device...

Wasmi 资源管理错误漏洞

Wasmi is an open source WebAssembly interpreter for embedded systems from Wasmi Labs. A resource management error vulnerability exists in Wasmi versions 0.41.0, 0.41.1, 0.42.0 through 0.47.1, 0.50.0 through 0.51.2, and 1.0.0, which stems from a flaw in the implementation of linear memory that cou...

Microsoft Office 资源管理错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from improper PCI device checking, which could lead to resource management errors...

Microsoft Windows Shell 资源管理错误漏洞

The Microsoft Windows Shell is the graphical user interface for the Windows operating system from Microsoft Corporation USA.Easily recognizable elements of the Windows shell include features such as the desktop, the taskbar, the start menu, the task switcher, and autoplay. On some versions of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a hot-plug callback leak that could lead to improper resource management...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows Server...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are affected:Windows Server...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A resource management error vulnerability exists in Mozilla Firefox versions prior to 146, which stems from a post-release reuse issue in the Audio/Video GMP component that could lead to memory...