SevenCs ORCA G2 安全漏洞

SevenCs ORCA G2 is an electronic charting system from SevenCs, Germany. A security vulnerability exists in SevenCs ORCA G2 version 2.0.1.35, which originates from the regService process applying a security descriptor without an explicitly configured DACL, and could result in system interruption,...

CVE-2025-66861

A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger an out-of-bounds read in the dunqualifiedname function in the cp-demangle.c file, causing a crash and resulting in a denial of service. Mitigation Mitigation for this issue is either not available or the...

Security Advisory 0132

Security Advisory 0132 . CSAF PDF Date: December 30, 2025 Revision | Date | Changes ---|---|--- 1.0 | December 30, 2025 | Initial release 1.1 | February 3, 2026 | Updated Required Configuration for Exploitation The CVE-ID tracking this issue: CVE-2025-7048 CVSS:3.1 Base Score 4.3...

The vulnerability of the hfsplus_uni2asc() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hfsplusuni2asc function in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the JIT-compiler used by Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the bpf_sock_addr() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the bpfsockaddr function in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the GMP component in Mozilla Firefox and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the GMP component in Mozilla Firefox and the Thunderbird email client relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the verify_field_val() function in the Integration for Contact Forms and Google Sheets plugin of the WordPress content management system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the verifyfieldval function in the Integration for Contact Forms and Google Sheets plugin of the WordPress content management system is related to deserialization mechanism flaws. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...

EUVD-2025-205374

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node...

CVE-2025-66378

Pexip Infinity 38.0 and 38.1 before 39.0 has insufficient access control in the RTMP implementation, allowing an attacker to disconnect RTMP streams traversing a Proxy Node...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

CVE-2018-25146

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

CVE-2018-25146

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

CVE-2018-25146

CVE-2018-25146 affects Microhard Systems IPn4G v1.1.0. Multiple connected docs confirm an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes by using a hidden feature to send arbitrary signals to kill background processes and system serv...

CVE-2018-25146 Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

CVE-2018-25146 Microhard Systems IPn4G 1.1.0 Service Control Denial of Service

Microhard Systems IPn4G 1.1.0 contains an undocumented vulnerability that allows authenticated attackers to list and manipulate running system processes. Attackers can send arbitrary signals to kill background processes and system services through a hidden feature, potentially causing service...

The vulnerability in the net/core/skbuff.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/core/skbuff.c module of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

PT-2025-53050

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's mt76 mt7921 driver related to handling of transmit status txs in AMSDU Aggregated Multiple Small Data Units. If frames are aggregated in AMSDU, txs ma...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...