The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information and cause service failures.

The vulnerability of the Core component in Oracle VM VirtualBox relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures...

The vulnerability of Tenda AC6 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of Tenda AC6 router microprogramming software is related to the execution of an operation beyond the buffer boundaries in memory when processing the wpapskcrypto parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

Vulnerability of RDMA/cxgb4 components of the Linux operating system’s kernel, allowing a hacker to cause a service failure

The vulnerability of RDMA/cxgb4 components of the Linux operating system is related to the assignment of the NULL pointer in the actestablish and actopenrpl functions. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the calc_pll() function in the drivers/media/i2c/ar0521.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the calcpll function in the drivers/media/i2c/ar0521.c module of the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __ocfs2_change_file_space() function in the ocfs2 component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2changefilespace function in the ocfs2 component of the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sctp_sf_ootb() function in the net/sctp/sm_statefuns.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sctpsfootb function in the net/sctp/smstatefuns.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s ASoC kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s ASoC kernel component is related to the assignment of the NULL pointer in the function asocqcomlpasscpuplatformprobe in sound/soc/qcom/lpass-cpu.c. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dnspython tool for Python, related to improper validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the dnspython tool for Python is related to insufficient validation of data entered by users. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerabilities of the functions io_write_prep() and io_write() in the kernel code of the Linux operating system’s io_uring/io_uring.c module, which allow a hacker to cause a service failure.

The vulnerabilities of the functions iowriteprep and iowrite in the Linux operating system’s iouring/iouring.c kernel are related to improper resource locking. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the xhci kernel component in the Linux operating system allows a hacker to increase their privileges within the system.

The vulnerability of the xhci kernel component in Linux operating systems is related to errors that occur after release. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-55963

An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of...

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Improper Preservation of Consistency Between Independent Representations of Shared State

Overview Affected versions of this package are vulnerable to Improper Preservation of Consistency Between Independent Representations of Shared State which can result in two different OpenFlowNodeIds being assigned to the same SFF by different plugins. An attacker can trigger such a name conflict...

CVE-2025-0188

A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...

CVE-2024-9365

A Cross-Site Request Forgery CSRF vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized actions in the context of the victim's browser. This includes creating projects, model versions, and artifact versions, or changing settings. The impact of this vulnerability...

CVE-2024-8183

A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and...

Regular Expression Denial Of Service (ReDoS)

jsPDF is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability is due to improper input validation due to user-controlled arguments in the addImage, html, and addSvgAsImage methods allowing the use of harmful data URLs, leading to high CPU utilization and service disruption...

The vulnerability of the `bnxt_rdma_aux_device_init()` function in the `driver/net/ethernet/broadcom/bnxt/bnxt_ulp.c` module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bnxtrdmaauxdeviceinit function in the driver/net/ethernet/broadcom/bnxt/bnxtulp.c file of the Linux kernel is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `nvme_alloc_admin_tag_set()` function in the drivers/nvme/host/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmeallocadmintagset function in the drivers/nvme/host/core.c file of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __vhost_worker_flush() function in the drivers/vhost/vhost.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vhostworkerflush function in the drivers/vhost/vhost.c module of the Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...