GNU GRUB Resource Management Error Vulnerability

GNU GRUB is a Linux system boot program from the GNU community. A resource management error vulnerability exists in GNU GRUB, which originates from a module uninstallation without clearing hooks, and can be exploited by an attacker to initiate a large number of requests, consuming system resource...

PT-2025-32227 · Tigo Energy · Tigo Energy Cca

Name of the Vulnerable Software and Affected Versions: Tigo Energy CCA affected versions not specified Description: The Tigo Energy CCA is susceptible to a command injection issue in the /cgi-bin/mobile api endpoint when the DEVICE PING command is invoked. This allows for remote code execution du...

The vulnerability of the CFNetwork framework in iPadOS and macOS systems, which allows a hacker to trigger a service failure.

The vulnerability of the CFNetwork framework in iPadOS and macOS relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. This allows attackers to gain unauthorized access to protected information, elevate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute...

The vulnerability in the built-in web server boa (/boafrm/formIPv6Addr) of TOTOLINK X15 router software allows a hacker to induce a service failure.

The vulnerability of the built-in web server boa /boafrm/formIPv6Addr of TOTOLINK X15 router software relates to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to cause service interruption...

The vulnerability of the V8 component of the Node.js software platform, which allows a hacker to trigger a service failure

The vulnerability of the V8 component of the Node.js software platform is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

Vulnerability fixed in SonicWall SonicOS

SonicWall has fixed a vulnerability in SonicOS. The vulnerability is in how SonicOS' SSL VPN interface handles externally controlled formatting strings. This can be exploited by external, unauthenticated attackers, leading to service disruptions. Attackers can exploit this vulnerability to affect...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to buffer overflow in the stack, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to uncontrolled memory distribution, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to reading beyond the buffer in memory, allowing a hacker to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service interruptions by...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...

The vulnerability of the nbd_genl_connect() function in the nbd component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nbdgenlconnect function in the nbd component of the Linux operating system’s kernel lies in its ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS, due to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to cause service interruptions...

The vulnerability of the __clk_register() function in the clk component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clkregister function in the clk component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...