Lustre lustre_msg_string Heap Buffer Overflow DoS

The vulnerability of the lustremsgstring function in the ptlrpc module of the Lustre file system is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Form Validation Popup Handler Firefox Information Disclosure

The vulnerability of the Form Validation Popup Handler component in the Firefox web browser is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker to cause service failures...

Nested iFrame Handler Firefox SameSite Cookie

The vulnerability of the Nested iFrame Handler component in the Firefox web browser is related to an incorrect SameSite attribute in the cookie file. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service interruptions...

Linux ext4_mb_find_by_goal Heap Buffer Overflow DoS

The vulnerability of the ext4mbfindbygoal function in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-3586

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The suspend/resume functionality is currently broken on the i.MX6QDL platform. This issue is documented in the NXP errata ERR005723. A patch has been applied to address the problem by...

NVIDIA BlueField access control

The vulnerability of NVIDIA BlueField data processing processor microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to read and modify data, or cause service failures...

ATA over Ethernet (AoE) Driver Heap Buffer Overflow DoS

The vulnerability of the tx function in the drivers/block/aoe/aoenet.c module of the Linux kernel is related to an incorrect counting of references to the netdevice structure object. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in Huawei HarmonyOS, which stems from an unsecured checksum of an incoming parameter in the HDC module. An attacker...

AutoCAD Modeling Access Code Execution

The vulnerability of the ACAD.exe executable file of the AutoCAD modeling, design, and drawing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

AutoCAD acdb25.dll RCE

The vulnerability of the acdb25.dll library in AutoCAD simulation, design, and drawing software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitra...

ASMDATAX230A.dll Unauthenticated RCE

The vulnerability of the ASMDATAX230A.dll software, which is used for simulation, design, and drafting in AutoCAD, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute...

libodxdll.dll Code Execution

The vulnerability of the libodxdll.dll library in software for simulation, design, and drawing in AutoCAD is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a...

libodxdll.dll Code Execution

The vulnerability of the libodxdll.dll library in software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execu...

odxsw_dll.dll Unauthenticated RCE

The vulnerability of the odxswdll.dll software for simulation, design, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary...

Oracle MySQL Server InnoDB Unauthorized Access

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access for reading, creating, modifying, and deleting data, or to caus...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the network MySQL protocol...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the network MySQL protocol...

Squid Proxy Server DoS

The vulnerability of the Squid proxy server is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted ESI packets...

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...