The vulnerability of the DefaultHttp2FrameReader class in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.

The vulnerability of the DefaultHttp2FrameReader class in the network application development framework for protocols like Netty relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the distribution of resources without any restrictions or regulations, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

The vulnerability of the hi3660_thermal_probe() function in the drivers/thermal/hisi_thermal.c module of the Linux kernel’s temperature control driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hi3660thermalprobe function in the drivers/thermal/hisithermal.c module of the Linux kernel’s temperature control driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the dasd_eckd_init() function in the drivers/s390/block/dasd_eckd.c file of the S390 block device driver on the Linux operating system’s kernel platform allows a attacker to cause a service failure.

The vulnerability of the dasdeckdinit function in the drivers/s390/block/dasdeckd.c file of the S390 block device driver on the Linux operating system’s kernel platform is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a...

The vulnerability of the idxd_cdev_register() function in the drivers/dma/idxd/cdev.c module of the Intel Data Accelerator driver software allows a malicious actor to cause a service failure.

The vulnerability of the idxdcdevregister function in the drivers/dma/idxd/cdev.c module of the Intel Data Accelerator driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to...

The vulnerability of the tcm_loop_setup_hba_bus() function in the drivers/target/loopback/tcm_loop.c module of the TCM driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcmloopsetuphbabus function in the drivers/target/loopback/tcmloop.c module of the Linux TCM driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause service failures...

ROS-20260320-73-0009

A vulnerability in the Golang programming language is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

The vulnerability of the tegra241cmdqv_init_structures() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.

The vulnerability of the tegra241cmdqvinitstructures function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a...

The vulnerability of the dx_probe() function in the fs/ext4/namei.c module of the Linux file system support module allows a hacker to cause a service failure.

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Linux file system support module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...

CVE-2025-55853

SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery SSRF. The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTM...

The vulnerability of the ipcomp_free_scratches() function in the net/xfrm/xfrm_ipcomp.c module, a component of the Linux kernel’s networking functions, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ipcompfreescratches function in the net/xfrm/xfrmipcomp.c module, which is part of the Linux kernel’s networking functions, relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the find_sdca_entity_control() function in the sound/soc/sdca/sdca_functions.c module of the Linux operating system’s SoC audio support allows a intruder to trigger a service failure.

The vulnerability of the findsdcaentitycontrol function in the sound/soc/sdca/sdcafunctions.c module of the Linux operating system’s SoC audio support is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause...

Elasticsearch 安全漏洞

Elasticsearch is a search and analytics engine from Dutch company Elastic. A security vulnerability exists in Elasticsearch that stems from an unrestricted resource allocation that could lead to a denial of service...

Elastic Elasticsearch 安全漏洞

Elastic Elasticsearch is a search engine based on the Lucene library from the Dutch company Elastic. A security vulnerability exists in Elastic Elasticsearch that stems from an unrestricted resource allocation that could lead to a denial of service...

ROS-20251216-7301

A vulnerability in the ReadJXLImage function of the GraphicsMagick graphical editor is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20251020-05

Vulnerability in the audit subroutine of the enterprise information archiving platforms Vault Enterprise and Vault Community Edition is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sending...

Advisory ROSA-SA-2025-3029

software: redis 7.2.10 OS: ROSA-CHROME unaffected versions = redis-7.2.10-1 affected versions redis-7.2.10-1 CVE-ID: CVE-2024-31227 BDU-ID: 2024-09249 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability exists in the Redis database management system due to insufficient input validation. Exploitation of t...

ROS-20250911-09

A vulnerability in the Apache Commons FileUpload library is related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

QNAP File Station 5 安全漏洞

QNAP Systems File Station 5威联通QNAP presents a file management application for browsing, uploading, downloading and managing files and folders stored on NAS devices, remote servers or external storage devices. A denial of service vulnerability exists in QNAP Systems File Station 5, which stems fro...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves the distribution of resources without any restrictions or controls. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...