5449 matches found
The vulnerability in the `fs/fuse/virtio_fs.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `tcp_set_default_congestion_control()` function in the Linux kernel’s `net/ipv4/tcp_cong.c` component allows a attacker to cause a service failure.
The vulnerability of the tcpsetdefaultcongestioncontrol function in the net/ipv4/tcpcong.c component of the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel lies in improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the i40e_client_subtask() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the i40eclientsubtask function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 device, caused by buffer overflows, allows a hacker to trigger a maintenance failure.
The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component: The Optimizer of the Oracle MySQL Server system, which allows a hacker to cause a service failure.
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component of the Oracle MySQL Server management system are related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the Secure Email Gateway (SEG) email security gateway arises from the possibility of operations going beyond the buffer in memory. This allows attackers to circumvent security restrictions, enhance their privileges, or cause service interruptions.
The vulnerability of the Secure Email Gateway SEG email security gateway is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain additional privileges, or cause service interruptions by...
CVE-2025-21503
Removed by vendor...
The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows attackers to cause a service failure.
The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the IPsec IKE service in the FortiOS operating system and the scalable cloud security system FortiSASE allows a attacker to induce a service failure.
The vulnerability of the IPsec IKE service in the FortiOS operating system and the scalable cloud security system FortiSASE is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted...
The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves a buffer overflow when processing the length of the checksum. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...
The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing (PUB) lies in the use of a regular expression with inefficient computational complexity, allowing an attacker to trigger a service failure.
The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability can...
The vulnerability of Dell PowerScale InsightIQ software for performance monitoring and reporting lies in its insufficient attempt-limiting mechanism for authentication. This allows a malicious actor to trigger a service failure.
The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...
The vulnerability of the Exiv2 metadata management library, related to buffer overflow in dynamic memory, allows a attacker to cause a service failure.
The vulnerability of the Exiv2 metadata management library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the software implementations of TLS and SSL protocols for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing (PUB) allows a perpetrator to cause service failures.
The vulnerability of software implementations of TLS and SSL protocols for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB involves deficiencies in access control. Exploiting this vulnerability could allow ...
Denial of Service in Keycloak Server via Security Headers
A potential Denial of Service DoS vulnerability has been identified in Keycloak, which could allow an administrative user with the rights to change realm settings to disrupt the service. This is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server...
Virtuoso Open-Source Edition SQL注入漏洞
Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. An SQL injection vulnerability exists in Virtuoso Open-Source Edition version v7.2.11,...
The vulnerability in the full-screen mode of browsers like Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS allows a hacker to trigger a service failure.
The vulnerability in the full-screen mode of browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Mac OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruptions remote...