The vulnerability of the `tcp_set_default_congestion_control()` function in the Linux kernel’s `net/ipv4/tcp_cong.c` component allows a attacker to cause a service failure.

The vulnerability of the tcpsetdefaultcongestioncontrol function in the net/ipv4/tcpcong.c component of the Linux kernel leads to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the `fs/fuse/virtio_fs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fs/fuse/virtiofs.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i40e_client_subtask() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the i40eclientsubtask function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the imgu_fmt() function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the imgufmt function in the drivers/staging/media/ipu3/ipu3-v4l2.c component of the Linux kernel lies in improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...

DeepSeek Faces Large-scale Cyberattack, Halts New User Registrations

DeepSeek, a new China-backed AI platform, faces a cyberattack disrupting new user registrations. Learn about its rapid growth,…...

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 device, caused by buffer overflows, allows a hacker to trigger a maintenance failure.

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

The vulnerability of the sub_422eb8() function in Linksys E8450 Wi-Fi router software allows a hacker to induce a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software involves copying buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component: The Optimizer of the Oracle MySQL Server system, which allows a hacker to cause a service failure.

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component of the Oracle MySQL Server management system are related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

GHSA-9M5P-C77C-F9J7 DoS in Cilium agent DNS proxy from crafted DNS responses

Impact In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic ...

CVE-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

The vulnerability of the Secure Email Gateway (SEG) email security gateway arises from the possibility of operations going beyond the buffer in memory. This allows attackers to circumvent security restrictions, enhance their privileges, or cause service interruptions.

The vulnerability of the Secure Email Gateway SEG email security gateway is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain additional privileges, or cause service interruptions by...

CVE-2025-21503

Removed by vendor...

The vulnerability of the IPsec IKE service in the FortiOS operating system and the scalable cloud security system FortiSASE allows a attacker to induce a service failure.

The vulnerability of the IPsec IKE service in the FortiOS operating system and the scalable cloud security system FortiSASE is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted...

The vulnerability of the Gstreamer multimedia framework, related to buffer overflows in the stack, allows attackers to cause a service failure.

The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2024-53683

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...

CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves a buffer overflow when processing the length of the checksum. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...

The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing (PUB) lies in the use of a regular expression with inefficient computational complexity, allowing an attacker to trigger a service failure.

The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability can...