Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the flatten, min, max, mean, and median functions when processing deeply nested or cyclic data structures. An attacker can cause the application to crash by supplying maliciously...

The vulnerability of TP-Link TL-WR940N V6’s microprogramming software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of TP-Link TL-WR940N V6 router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the embedded software for DGN2200v4 lies in insufficient validation of input data, allowing a hacker to execute arbitrary code.

The vulnerability of the embedded software for DGN2200v4 lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of RUGGEDCOM ROS Ethernet switch microprogramming software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the mm/userfaultfd.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mm/userfaultfd.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SUSE-SU-2025:4335-1 Security update for gegl

This update for gegl fixes the following issues: - CVE-2025-10921: lack of proper validation of user-supplied data when parsing HDR files can lead to RCE bsc1250496...

Vulnerability of the loongson2_clk_probe() function in the drivers/clk/clk-loongson2.c module – This driver is part of the Linux kernel’s software synchronization support, which can be exploited by attackers to cause system failures.

Vulnerability of the loongson2clkprobe function in the drivers/clk/clk-loongson2.c module – The Linux kernel programming synchronization driver has a vulnerability related to copying buffers without checking input data. Exploiting this vulnerability could allow an attacker to cause system failure...

CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field=add=site=1=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to cross site...

abrt security update

2.10.9-25.0.1 - Replaces sosreport to sos report in sosreport-event.conf Orabug: 38590929 - abrt-dump-oops-Fix-vmcore-call-trace-parsing-arm Orabug: 34184473 - Disable autoreporting on Oracle Linux Orabug: 32890748 - Add orabug32082455-Upstreamreferenceinpython3-abrt-addon.patch Orabug: 32082455 ...

EUVD-2025-201188

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

CVE-2025-14006

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

CVE-2025-14006

CVE-2025-14006 affects dayrui XunRuiCMS up to version 4.7.1. The vulnerability lies in the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1, where manipulating the argument data[name] enables cross-site scripting. The issue is exploitable remotely and the public exploit has been ...

CVE-2025-14006 dayrui XunRuiCMS Add Data Validation admind45f74adbd95.php cross site scripting

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

CVE-2025-14006: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1. Affected by this issue is some unknown functionality of the file /admind45f74adbd95.php?c=field&m=add&rname=site&rid=1&page=1 of the component Add Data Validation Page. The manipulation of the argument dataname leads to...

PT-2025-49028

Name of the Vulnerable Software and Affected Versions dayrui XunRuiCMS versions up to 4.7.1 Description A security issue exists in dayrui XunRuiCMS. The issue is related to cross site scripting, potentially allowing remote attacks. The manipulation of the dataname argument in the file...

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service failures...

PT-2025-51481

Уязвимость программного обеспечения для развертывания и выполнения моделей искусственного интеллекта NVIDIA Triton Inference Server ранее TensorRT Inference Server связана с некорректной проверкой количества данных на входе. Эксплуатация уязвимости может позволить нарушителю, действующему удалённ...

gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

A heap-based buffer overflow vulnerability was discovered in GIMP’s DICOM DCM file parser. The flaw occurs because the application fails to properly validate the length of user-supplied data before copying it to a heap buffer. This can lead to arbitrary code execution when a user opens a speciall...