The vulnerability of the `cs_dspmock_wmfw_add_info` function in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the csdspmockwmfwaddinfo function in the Linux operating system’s kernel is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the vmci_transport_packet() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vmcitransportpacket function in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the usb_bulk_msg() function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the usbbulkmsg function in the Linux operating system is related to improper initialization of the resource. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2025-35943

Name of the Vulnerable Software and Affected Versions: dotCMS versions 24.03.22 and after Description: A Boolean-based blind SQL injection vulnerability exists in the /api/v1/contenttype endpoint. The endpoint utilizes the sites query parameter, which accepts a comma-separated list of site...

The vulnerability of the rxe_create_cq function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the rxecreatecq function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the cdns3 component in the Linux operating system, which allows a hacker to trigger a service failure.

The vulnerability of the cdns3 component in the Linux operating system’s kernel is related to a freeze that occurs due to repeated resource blocking. Exploiting this vulnerability can allow an attacker who operates remotely to cause service interruptions...

The vulnerability of the mlx5e_fix_uplink_rep_features function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5efixuplinkrepfeatures function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the nfs_get_lock_context function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the nfsgetlockcontext function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

PT-2025-35193

Name of the Vulnerable Software and Affected Versions: Synology RADIUS Server versions prior to 3.0.27-0139 Description: The application contains a cross-site scripting XSS issue. Remote authenticated users with administrator privileges can read or write limited files in SRM and conduct limited...

The vulnerability of the cgroup subsystem’s BPF kernel mechanism in Linux systems allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the cgroup subsystem’s BPF kernel mechanism in Linux lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

GHSA-F2M2-4Q6R-CWC4 simple-admin-core SQL Injection vulnerability

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – systems for controlling access to virtual environments – allows a perpetrator to execute arbitrary code and trigger service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of the io_wq_free_work function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iowqfreework function in Linux kernel is related to errors during link counter updates. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-51667

Technical details for CVE-2025-51667 are not publicly available in the provided connected documents. Monitor for updates.

The vulnerability of the IPsec VPN micro-programming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service interruptions.

The vulnerability of the IPsec VPN micro-programming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause a service failure.

The vulnerability of the SSL VPN remote access function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems relates to the execution of a loop with an unavailable condition for the exit. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

The vulnerability of the DHCP Snooping security function in Cisco IOS XE, related to uncontrolled resource consumption, allows a attacker to trigger a service failure.

The vulnerability of the DHCP Snooping security function in Cisco IOS XE involves an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the udf_find_entry() function in the Linux operating system’s kernel allows a hacker to gain elevated privileges or cause service interruptions.

The vulnerability of the udffindentry function in the Linux operating system’s kernel is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...