CVE-2025-37124

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...

The vulnerability of the asn1_delete_structure() function in the Transport Layer Security library GnuTLS allows a attacker to cause a service failure.

The vulnerability of the asn1deletestructure function in the GnuTLS transport layer security library is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause service interruptions...

ROS-20250912-19

Vulnerability in the HTTP2 handler of Apache Tomcat application server is related to incorrect release of a resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

Denial Of Service (DoS)

github.com/cri-o/cri-o is vulnerable to Denial Of Service DoS. The vulnerability is due to improper user creation handling due to reading the entire /etc/passwd file into memory when securityContext.runAsUser specifies a non-existent user, leading to excessive memory consumption and potential...

UTT 1200GW Buffer Overflow Vulnerability

The UTT 1200GW is an enterprise-grade wireless router from Atech Technology UTT designed to meet the networking needs of small to medium-sized businesses or large space office environments. The UTT 1200GW suffers from a buffer overflow vulnerability that originates from the sub4B48F8 function in...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow or data corruption, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to integer overflow or data corruption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the vmci_transport_packet() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the vmcitransportpacket function in the Linux operating system’s kernel is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-35943

Name of the Vulnerable Software and Affected Versions: dotCMS versions 24.03.22 and after Description: A Boolean-based blind SQL injection vulnerability exists in the /api/v1/contenttype endpoint. The endpoint utilizes the sites query parameter, which accepts a comma-separated list of site...

The vulnerability of the mlx5e_fix_uplink_rep_features function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5efixuplinkrepfeatures function in the Linux operating system is related to a pointer swapping error. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the rxe_create_cq function in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the rxecreatecq function in Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2025-35193

Name of the Vulnerable Software and Affected Versions: Synology RADIUS Server versions prior to 3.0.27-0139 Description: The application contains a cross-site scripting XSS issue. Remote authenticated users with administrator privileges can read or write limited files in SRM and conduct limited...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

GHSA-F2M2-4Q6R-CWC4 simple-admin-core SQL Injection vulnerability

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – systems for controlling access to virtual environments – allows a perpetrator to execute arbitrary code and trigger service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

CVE-2025-51667

Technical details for CVE-2025-51667 are not publicly available in the provided connected documents. Monitor for updates.

The vulnerability of the udf_find_entry() function in the Linux operating system’s kernel allows a hacker to gain elevated privileges or cause service interruptions.

The vulnerability of the udffindentry function in the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...

GHSA-84PP-QR92-95C9 Liferay Portal users can upload an unlimited amount of files

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.1, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allow users to upload an unlimited amount of files through the...

Linux Distros Unpatched Vulnerability : CVE-2022-23516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah = 2.2.0, 2.19.1 uses recursion...

Linux Distros Unpatched Vulnerability : CVE-2020-2892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.19 and prior. Easily...