The vulnerability of the `trace_kvm_nested_vmenter_failed()` function in the `arch/x86/kvm/trace.h` module of the virtualization subsystem on the Linux x86 kernel platform allows a attacker to access protected information or cause service failures.

The vulnerability of the tracekvmnestedvmenterfailed function in the arch/x86/kvm/trace.h module of the virtualization subsystem on the Linux x86 kernel platform is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability may allow an attacker to...

The vulnerability of the check_func_arg() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the checkfuncarg function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability in the fs/netfs/read_collect.c module of the Linux kernel file system netfs allows a attacker to cause a service failure.

The vulnerability of the fs/netfs/readcollect.c module of the Linux file system netfs kernel relates to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the init_dell_smbios_wmi() function in the drivers/platform/x86/dell-smbios-wmi.c module – This driver provides support for X86 device controllers in the Linux operating system, allowing an attacker to cause a service failure.

Vulnerability of the initdellsmbioswmi function in the drivers/platform/x86/dell-smbios-wmi.c module – The Linux X86 kernel device support drivers are vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause...

The vulnerability of the `btrfs_log_new_name()` function in the `fs/btrfs/tree-log.c` module of the file system support module for Linux’s kernel allows a hacker to cause a service failure.

The vulnerability of the btrfslognewname function in the fs/btrfs/tree-log.c module of the btrfs file system support module in Linux systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the __jbd2_log_wait_for_space() function in the fs/jbd2/checkpoint.c module, which supports Linux kernel-based file systems, allows a attacker to trigger a service failure.

The vulnerability of the jbd2logwaitforspace function in the fs/jbd2/checkpoint.c module, which is part of the Linux kernel’s file system support, is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a servic...

CVE-2025-3855

Summary of CVE-2025-3855 (CodeCanyon RISE Ultimate Project Manager 3.8.2) A vulnerability exists in the component “Profile Picture Handler” for the endpoint /index.php/team_members/save_profile_image/ where the argument profile_image_file is manipulated, leading to improper control of resource id...

CVE-2025-3855 CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/teammembers/saveprofileimage/ of the component Profile Picture Handler. The manipulation of the argument...

CVE-2025-3855 CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/teammembers/saveprofileimage/ of the component Profile Picture Handler. The manipulation of the argument...

CVE-2025-0756 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')

Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Description Hitachi Vantara Pentaho Data Integration &...

CVE-2025-0756

Hitachi Vantara Pentaho Data Integration & Analytics versions prior to 10.2.0.2 (including 9.3.x and 8.3.x) do not restrict JNDI identifiers when creating platform data sources, enabling untrusted input to be used as resource identifiers. This can lead to access to, or modification of, sensitive ...

CVE-2025-0756 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')

Overview The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Description Hitachi Vantara Pentaho Data Integration &...

The vulnerability of the btintel_pcie_setup_hdev() function in the Linux kernel’s Bluetooth device support driver allows a hacker to cause a service failure.

The vulnerability of the btintelpciesetuphdev function in the Linux kernel’s Bluetooth device support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the set_wm_ranges() function in the drivers/gpu/drm/amd/display/dc/dcn301/dcn301_resource.c file – This function is part of the driver support for Direct Rendering Infrastructure (DRI) of AMD graphics cards in Linux operating systems. It can be exploited by attackers to cause service failures.

Vulnerability of the setwmranges function in the drivers/gpu/drm/amd/display/dc/dcn301/dcn301resource.c file – The drivers for AMD graphics cards that support Direct Rendering Infrastructure DRI in Linux operating systems are vulnerable due to improper control of resource identifiers “resource...

The vulnerability of the f2fs_setattr() function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems allows a attacker to compromise the integrity of protected information.

The vulnerability of the f2fssetattr function in the fs/f2fs/file.c module of the F2FS file system support in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

Vulnerability of the __dm_internal_suspend() function in the drivers/md/dm.c module – The driver for supporting multiple devices (RAID and LVM) in the Linux kernel allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the dminternalsuspend function in the drivers/md/dm.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability allows an attacker to...

The vulnerability of the efi_init() function in the arch/riscv/include/asm/efi.h module on RISC-V architecture processors of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the efiinit function in the arch/riscv/include/asm/efi.h module on RISC-V architecture processors in Linux operating systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...

Vulnerability of the sun8i_dwmac_dmainterrupt() function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – A driver for supporting Ethernet network adapters in the Linux operating system, which allows an attacker to compromise the integrity of protected information.

Vulnerability of the sun8idwmacdmainterrupt function in the drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c module – The Linux kernel’s Ethernet adapter support driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability cou...

CVE-2025-3405 FCJ Venture Builder appclientefiel HTTP GET Request ObterPedido resource injection

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDERID leads ...

CVE-2025-3405 FCJ Venture Builder appclientefiel HTTP GET Request ObterPedido resource injection

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDERID leads ...