CVE-2025-64187

OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Action Command notifications and prompts popups generated by the printer. An attacker who successfully...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization. An attacker can disrupt control over a running virtual machine instance by creating a pod with identical labels to the legitimate virt-launcher pod, misleading the controller into associating the fake pod with t...

CVE-2025-54863

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...

CVE-2025-64187

OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Action Command notifications and prompts popups generated by the printer. An attacker who successfully...

The vulnerability of the jpegBase::readMetadata() function in the library and the command-line utility for managing image metadata from Exiv2 allows a attacker to cause a service failure.

The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) software for deploying and running artificial intelligence models lies in the fact that it involves writing beyond the buffer boundaries, allowing a malicious actor to trigger a service failure.

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the ipMacBindListStore() function in the Tenda G3 wireless access point’s microprogramming software allows a hacker to cause a service failure.

The vulnerability of the ipMacBindListStore function in the Tenda G3 wireless access point’s microprogramming software is related to buffer overflow when processing the listStr parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially crafted POST...

The vulnerability of the ax25_kiss_rcv() function within the ax25_kiss_rcv module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ax25kissrcv function in the ax25kissrcv module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_426EF8() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the form_fast_setting_wifi_set() function in the Tenda AX1803 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formfastsettingwifiset function in the Tenda AX1803 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pad_compress_skb() function in the drivers/net/ppp/ppp_generic.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the padcompressskb function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel lies in the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sub_421BAC() function in the microprogramming software of TOTOLINK LR350 allows a intruder to cause a service failure.

The vulnerability of the sub421BAC function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the adreno_gpu_init() function in the drivers/gpu/drm/msm/adreno/adreno_gpu.c file of the DRI support module for the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the adrenogpuinit function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file, a part of the Linux Direct Rendering Infrastructure DRI support driver, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...