The vulnerability of OpenSSL’s parsing code for PKCS#12 file formats allows a hacker to induce a service failure.

The vulnerability of the PKCS12 format form field parsing code in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260129-73-0078

Vulnerability in mongodb-org related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid dereferencing a NULL pointer REASON Although unlikely, drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate may return NULL. SOLUTION Check the return value before dereferencing the variable...

ROS-20260113-7385

A vulnerability in the drivers/net/ethernet/marvell/octeontx2/nic/otx2dmacflt.c component of the Linux operating system kernel is related to insufficient checking for unusual or exceptional states. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2023-54176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mptcp: stricter state check in mptcpworker As reported by Christoph, the mptcp protocol can run the worker when the relevant msk socket is in an unexpected stat...

CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe 26.1, visionOS 26.1, tvOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1. A malicious application may cause unexpect...

EUVD-2025-203138

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in watchOS 26.1, iOS 18.7.2 and iPadOS 18.7.2, macOS Tahoe 26.1, visionOS 26.1, tvOS 26.1, macOS Sonoma 14.8.2, macOS Sequoia 15.7.2, iOS 26.1 and iPadOS 26.1. A malicious application may cause unexpect...

CVE-2025-43510

Connected documents confirm CVE-2025-43510 is a Copy-on-Write bug in the XNU kernel used in a multi-stage DarkSword exploit chain. The iOS/iPadOS/macOS chain details stage 4: sandbox escape from GPU to mediaplaybackd via this kernel bug, enabling broader privilege escalation. The vulnerability af...

MGASA-2025-0325 Updated webkit2 packages fix security vulnerabilities

A website may be able to exfiltrate sensitive system information. Description: The issue was addressed through improved state checks - CVE-2025-13947. Processing maliciously crafted web content may lead to an unexpected process crash. Description: Multiple issues were addressed by disabling array...

PT-2025-51006

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iOS versions prior to 26.1 iPadOS versions prior to 18.7.2 iPadOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 macOS Sonoma versions prior to 14.8.2 macOS Tahoe versions prior to 26.1 tvOS versions...

EUVD-2020-20418

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987206)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987206 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle then...

EUVD-2025-10262

Malicious code in bioql PyPI...

Vulnerability of the JavaScript component: The GC functions in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to compromise the confidentiality and integrity of protected information.

Vulnerability of the JavaScript component: The GC functions of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability allows an attacker to compromise the confidentiality and...

SUSE CVE-2025-39693

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference WHY Although unlikely drmatomicgetnewconnectorstate or drmatomicgetoldconnectorstate can return NULL. HOW Check returns before dereference. cherry picked from commit...

The vulnerability of the DS-Lite technology (Dual-Stack Lite) and NAT (Network Address Translation) in the Junos OS router series of MX devices, which allows a hacker to cause a service failure.

The vulnerability of the DS-Lite Dual-Stack Lite technology and NAT Network Address Translation in Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by...

The vulnerability of the adl_get_hybrid_cpu_type() function in the arch/x86/events/intel/core.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the adlgethybridcputype function in the arch/x86/events/intel/core.c module of the Linux operating system is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the web proxy function in the operating system PAN-OS, which allows a hacker to trigger a service failure

The vulnerability of the web proxy function in the operating system PAN-OS is related to insufficient checks for exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending numerous specially crafted packets...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from tcpm not properly checking state when processing discoveridentity messages, which could result in a warning...

The vulnerability of the Demon Routing Protocol Daemon (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...