CVE-2025-25208

A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster...

The vulnerability of the tpm_seal() function in the security/keys/trusted-keys/trusted_tpm1.c kernel module of the Linux operating system allows a perpetrator to gain access to protected information or cause service failures.

The vulnerability of the tpmseal function in the security/keys/trusted-keys/trustedtpm1.c kernel module of the Linux operating system is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability may allow an attacker to access protected...

PT-2025-24569 · Cyberdata · Cyberdata Intercom

Name of the Vulnerable Software and Affected Versions: CyberData Intercom affected versions not specified Description: The issue allows an unauthenticated user to gain access and cause a denial-of-service condition or system disruption. Recommendations: At the moment, there is no information abou...

PT-2025-24400 · Authorino · Authorino

Name of the Vulnerable Software and Affected Versions: Authorino affected versions not specified Description: A Developer persona can bring down the Authorino service, preventing the evaluation of all AuthPolicies on the cluster. Recommendations: At the moment, there is no information about a new...

The vulnerability of the Q Replication technology in the IBM DB2 database management system and IBM DB2 Connect Server allows a attacker to cause service interruptions.

The vulnerability of the Q Replication technology in IBM DB2 database management systems, including IBM DB2 Connect Server, involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Vulnerability of the rockchip_saradc_trigger_handler() function in the drivers/iio/adc/rockchip_saradc.c module – This driver supports various types of built-in sensors in the Linux operating system. An attacker could exploit this vulnerability to gain access to protected information or cause service failures.

Vulnerability of the rockchipsaradctriggerhandler function in the drivers/iio/adc/rockchipsaradc.c module – The drivers for supporting various types of embedded sensors in the Linux operating system rely on the use of uninitialized resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the acpi_nfit_ctl() function in the drivers/acpi/nfit/core.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the acpinfitctl function in the drivers/acpi/nfit/core.c file of the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the zpa2326_fill_sample_buffer() function in the drivers/iio/pressure/zpa2326.c module – This driver supports various types of built-in sensors in the Linux operating system. An attacker can exploit this vulnerability to gain access to protected information or cause service failures.

Vulnerability of the zpa2326fillsamplebuffer function in the drivers/iio/pressure/zpa2326.c module – The driver for supporting various types of embedded sensors in the Linux operating system involves the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to...

Vulnerability of the ads8688trigger_handler() function in the drivers/iio/adc/ti-ads8688.c module – This driver supports various types of built-in sensors in the Linux operating system. An attacker could exploit this vulnerability to gain access to protected information or cause service failures.

Vulnerability of the ads8688triggerhandler function in the drivers/iio/adc/ti-ads8688.c module – The Linux kernel driver for supporting various types of built-in sensors is vulnerable due to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access...

The vulnerability of the nf_tables_dump_setelem() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nftablesdumpsetelem function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the Siemens User Management Component (UMC) in products such as SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal (TIA Portal) allows a attacker to trigger a service failure.

The vulnerability of the Siemens User Management Component UMC, which is found in products such as SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal TIA Portal, relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow a maliciou...

The vulnerability of the shmem_mfill_atomic_pte() function in the mm/shmem.c module of the Linux operating system’s memory management subsystem allows a hacker to trigger a service failure.

The vulnerability of the shmemmfillatomicpte function in the mm/shmem.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nf_tables_newobj() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a attacker to access protected information or cause a service failure.

The vulnerability of the nftablesnewobj function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability may allow an attacker to access...

The vulnerability of the breakpoint_handler() function in the arch/arm/kernel/hw_breakpoint.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the breakpointhandler function in the arch/arm/kernel/hwbreakpoint.c module of the Linux operating system is related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of the bnxt_rx_pkt() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module – A Linux kernel Ethernet network adapter driver support mechanism that allows an attacker to access protected information or cause service failure.

Vulnerability of the bnxtrxpkt function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module – The Linux kernel’s Ethernet network adapter support driver has vulnerabilities related to indexing mechanisms. Exploiting this vulnerability could allow attackers to access protected information or...

The vulnerability of the Diffie-Hellman Key Exchange (DHE) protocol, which is related to uncontrolled resource consumption, allows a attacker to cause a service failure.

The vulnerability of the Diffie-Hellman Key Exchange DHE protocol is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the built-in web server boa (/boafrm/formDMZ) of TOTOLINK X15 router’s microprogramming software allows a perpetrator to execute arbitrary commands or cause service failure.

The vulnerability of the built-in web server boa /boafrm/formDMZ of TOTOLINK X15 router microprogramming software is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to execute...

The vulnerability of the sanitiseArg and sanitizeArg configuration in the network gateway for protecting web applications, ModSecurity, allows a attacker to cause a service failure.

The vulnerability of the sanitiseArg and sanitizeArg configuration functions in the network gateway for protecting web applications under ModSecurity is related to excessive resource consumption. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the CDUP command in the Freefloat FTP Server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the CDUP command in the Freefloat FTP server is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the lzma_stream_decoder_mt() function in the liblzma library, a data compression package for XZ Utils, allows a hacker to cause a service failure.

The vulnerability of the lzmastreamdecodermt function in the liblzma library, a component of the XZ Utils data compression package, involves premature resource release due to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...