MongoDB -- may be susceptible to DoS due to Accumulated Memory Allocation

[email protected] reports: MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a null pointer dereference in the PDF Preview module, and can ...

PT-2025-28119 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the PDF preview module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no informatio...

PT-2025-28112 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the PDF preview module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no informatio...

PT-2025-28116 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the PDF preview module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no informatio...

PT-2025-28103 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a null pointer dereference vulnerability in the application exit cause module. Successful exploitation of this vulnerability may affect function stability...

PT-2025-28115 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the PDF preview module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no informatio...

PT-2025-28113 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue in the PDF preview module may affect function stability upon successful exploitation. Recommendations: At the moment, there is no information about a newer...

PT-2025-28114 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the PDF preview module. Successful exploitation of this issue may affect function stability. Recommendations: At the moment, there is no informatio...

CVE-2025-5351

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additiona...

CVE-2025-53367

An out-of-bounds write flaw was found in DjVuLibre. The MMRDecoder::scanruns method is affected by an out-of-bounds write vulnerability because it does not check that the xr pointer stays within the bounds of the allocated buffer. This issue can lead to writes beyond the allocated memory, resulti...

CVE-2025-38146

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck...

CVE-2024-46993

A flaw was found in Electron. The nativeImage.createFromPath and nativeImage.createFromBuffer functions contain a heap buffer overflow triggered by processing excessively large image data. This flaw allows a local attacker to trigger this overflow by providing a specially crafted image file or...

CVE-2025-6858

A flaw was found in hdf5. The H5Cflushsingleentry function contains a NULL pointer dereference triggered by the manipulation of data within a file. A local attacker can induce this condition. This issue can lead to a potential denial of service. Mitigation Mitigation for this issue is either not...

CVE-2025-6818

A flaw was found in hdf5. The H5Ochunkprotect function in /src/H5Ochunk.c contains a heap-based buffer overflow resulting from improper memory handling. This flaw allows local attackers to trigger the overflow by manipulating a crafted file. This condition can lead to a denial of service...

Linear Stability Analysis for a System of Singular Amplitude Equations Arising in Biomorphology

We study linear stability of exponential periodic solutions of a system of singular amplitude equations associated with convective Turing bifurcation in the presence of conservation laws, as arises in modern biomorphology models, binary fluids, and elsewhere. Consisting of a complex Ginzburg-Land...

Security update for google-osconfig-agent

This update for google-osconfig-agent fixes the following issues: Update to version 20250416.02 bsc1244304, bsc1244503 defaultSleeper: tolerate 10% difference to reduce test flakiness Add output of some packagemanagers to the testdata from version 20250416.01 Refactor OS Info package from version...

CVE-2025-6750

A flaw was found in hdf5. The H5Omtimenewencode function in src/H5Omtime.c contains a heap-based buffer overflow vulnerability that can be triggered by crafted input. A local attacker can exploit this condition by providing a specially constructed file. This manipulation may result in a denial of...

SUSE SLES15 Security Update : kernel (SUSE-SU-2025:01919-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01919-1 advisory. The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes. The following security bugs...

Virtuozzo Hybrid Infrastructure 7.0 (7.0.0-250)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, object and core storage, networking, as well as monitoring and alerts. Additionally, this release delivers stability improvements and addresses issues found in previous releases...