ROS-20260605-73-0045

The vulnerability in Tomcat11 is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-15608

This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution throug...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a live lock issue in fuse synchronized file placement, which could make services unavailable...

The vulnerability of the InnoDB component of the MySQL Database Server, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL Database Management System is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of microprogrammed network boards from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, arises due to improper cleaning or release of resources. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of microprogrammed network board software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, stems from improper cleaning or release of resources during the processing of the pb.c file router/phonebook/pb.c. Exploiting this vulnerability can...

The vulnerability of microprogrammed network boards from ASR Microelectronics, such as ASR1803L, ASR1806, ASR1901, and ASR1903L, arises due to improper cleaning or release of resources. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of microprogrammed network board software from ASR Microelectronics, including models ASR1803L, ASR1806, ASR1901, and ASR1903L, stems from improper cleaning or release of resources during the processing of the router/sms/sms.c file. Exploiting this vulnerability can allow an...

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers allows a hacker to cause a service outage.

The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z teleworkers relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...

The vulnerability of Junos OS and Junos OS Evolved routers from the MX, MX304, EX9200, and PTX Series series lies in the insufficient handling of exceptional states, allowing attackers to trigger service interruptions.

The vulnerability of Junos OS and Junos OS Evolved routers from the MX, MX304, EX9200, and PTX Series series lies in the insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the NVIDIA GPU Display Driver allows a malicious individual to gain unauthorized access to modify data, expose sensitive information, or cause service failures.

The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data, disclose confidential information, or cause system failures...

The vulnerability of the Packet Forwarding Engine (PFE) module in Junos OS routers of the MX series allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Junos OS routers of the MX series is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the maple_tree component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mapletree component in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Werkzeug library for developing web applications, related to the manipulation of cross-site requests, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Werkzeug library for developing web applications relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

The vulnerabilities of the functions CLARRV(), DLARRV(), SLARRV(), and ZLARRV() in the Linear Algebra Package Library LAPACK, as well as the Linear Algebra Package Library OpenBLAS, allow attackers to gain access to confidential data and cause service interruptions.

The vulnerability of the functions CLARRV, DLARRV, SLARRV, and ZLARRV in the LAPACK linear algebra library is related to reading data beyond the allowed buffer size limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service...

The vulnerability of the OpenSSH server, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the OpenSSH server security tool is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in its algorithmic complexity, which allows attackers to trigger service interruptions.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of microprogrammed network adapter software in Intel Ethernet Controller E800 Series devices relates to a flaw in the data protection mechanism, allowing attackers to trigger a service failure.

The vulnerability of microprogrammed network adapters in Intel Ethernet Controller E800 Series devices is related to a breach in data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to bypassing authentication through spoofing, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the bypassing of authentication processes through spoofing techniques. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service...