The vulnerability of the Suricata intrusion detection and prevention system, related to the distribution of resources without restrictions or regulation, allows a intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system lies in the fact that resources are distributed without any restrictions or regulations during the decompression of compressed HTTP data. Exploiting this vulnerability allows a remote attacker to cause service interruptio...

The vulnerability of the library for analyzing and processing MIME messages, Email-MIME, allows for unlimited distribution of resources, enabling attackers to cause service failures.

The vulnerability of the library for analyzing and processing MIME messages in Email-MIMEE is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures through specially created MIME messages...

The vulnerabilities of the functions dev_fini_ggtt() and xe_ggtt_init_early() in the Linux operating system allow a hacker to trigger a service failure.

The vulnerabilities of the functions devfiniggtt and xeggttinitearly drivers/gpu/drm/xe/xeggtt.c in the Linux kernel are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...

The vulnerability of the pci_epfremove_cfs() function in the drivers/pci/endpoint/pci-epf-core.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the pciepfremovecfs function in the drivers/pci/endpoint/pci-epf-core.c component of the Linux kernel lies in the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the Loader component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the Loader component in Google Chrome browser is related to incorrect data type conversion. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented in DIRIS Digiware M-70 communication gateways allows a perpetrator to cause service interruptions.

The vulnerability of the Modbus TCP and Modbus RTU protocols implemented by DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-12782 Beaver Builder – WordPress Page Builder <= 2.9.4 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering

The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4. This is due to the plugin not properly verifying a user's authorization in the disable function. This makes it possible for authenticated attackers,...

Vulnerability of the process_isoc_td() function in the drivers/usb/host/xhci-ring.c module – The USB device driver support module of the Linux operating system allows a hacker to trigger a service failure.

Vulnerability of the processisoctd function in the drivers/usb/host/xhci-ring.c module – The driver for supporting USB devices in Linux kernels is vulnerable when an operation is performed outside of the buffer boundaries. Exploiting this vulnerability could allow a attacker to cause a service...

The vulnerability of the mfill_atomic() function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem allows a attacker to cause a service failure.

The vulnerability of the mfillatomic function in the mm/userfaultfd.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the LZ4_decompress_fast() function in the lz4-java data compression library allows a hacker to cause a service failure and disclose confidential information.

The vulnerability of the LZ4decompressfast function in the lz4-java data compression library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions and expose sensitive information...

The vulnerability of the rray_index_nospec() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rrayindexnospec function in the Linux operating system is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

Vulnerability of the intel_hdcp_read_valid_bksv() function in the driver/gpu/drm/i915/display/intel_hdcp.c module – This driver is part of the Linux kernel’s Direct Rendering Infrastructure (DRI) support mechanism. An attacker can exploit this vulnerability to cause a service failure.

Vulnerability of the intelhdcpreadvalidbksv function in the driver/gpu/drm/i915/display/intelhdcp.c module – The Linux DRI driver is vulnerable due to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the scsi.c component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the scsi.c component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the nft_limit_eval() function in the net/netfilter/nft_limit.c module of the netfilter component in the Linux operating system allows a hacker to access protected information or cause service failures.

The vulnerability of the nftlimiteval function in the net/netfilter/nftlimit.c module of the netfilter component of the Linux operating system is related to integer overflow. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Vulnerability of the function ice_dpll_init_worker() in the module drivers/net/ethernet/intel/ice/ice_dpll.c – a driver for supporting Ethernet adapter cards in Linux kernel-based operating systems, which allows an attacker to cause a service failure.

Vulnerability of the function icedpllinitworker in the module drivers/net/ethernet/intel/ice/icedpll.c – The driver for supporting Ethernet adapter cards in Linux operating systems is vulnerable due to improper control of resource identifiers “resource injection”. Exploiting this vulnerability...

CVE-2025-3012

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed...

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker who can persistently modify the firmware and affect the device boot process...

Denial of Service (DoS)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Denial of Service DoS via improper handling of the scheduledat parameter. An attacker can cause the admin panel to become non-functional by...

CVE-2025-3012

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed...

The vulnerability of the SetSysTimeCfg() function in the Tenda AX1803 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the SetSysTimeCfg function in the Tenda AX1803 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...