CVE-2025-8014

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption...

CVE-2025-8014

Removed by vendor...

Linux kernel __folio_migrate_mapping DoS

The vulnerability of the foliomigratemapping function in the Linux operating system kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

PT-2025-39734

Name of the Vulnerable Software and Affected Versions GitLab EE/CE versions 11.10 through 18.2.7 GitLab EE/CE versions 18.3 through 18.3.3 GitLab EE/CE versions 18.4 through 18.4.1 Description A denial of service issue exists in GraphQL endpoints within GitLab EE/CE. This allows unauthenticated...

Linux zynqmp_nvmem Heap Buffer Overflow DoS

The vulnerability of the zynqmpnvmem function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Linux fpsimd_thread_switch() DoS

The vulnerability of the fpsimdthreadswitch function in the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the vmamodify function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux xa_alloc_cyclic Heap Buffer Overflow DoS

The vulnerability of the xaalloccyclic function in Linux kernels is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

Cisco IOS XE DoS

The vulnerability of Cisco IOS XE Catalyst 9000 network devices is related to code errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Django annotate alias Code Execution

The vulnerability of the LoginView, LogoutView, and setlanguage functions in the Django web application framework is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2024-48014

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

Ericsson Indoor Connect security vulnerability

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which arises from improper input validation and could result in loss of integrity and confidentiality, unauthorized disclosure and modification ...

cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

A flaw was found in the CUPS printing system’s ippreadio function, which handles Internet Printing Protocol IPP requests. When processing specially crafted printer attribute responses, improper validation can cause a null pointer dereference. This leads to a crash in libcups, potentially disrupti...

UK Arrest Made After Cyberattack Disrupts Major European Airports

UK police arrest man over cyberattack on Collins Aerospace that disrupted check-in at Heathrow, Berlin, Brussels and other airports...

PT-2025-39253

Name of the Vulnerable Software and Affected Versions NVIDIA nvJPEG affected versions not specified Description The software contains a flaw in JPEG encoding that could allow an attacker to trigger an out-of-bounds read by supplying a specially designed image. The image dimensions are crafted to...

AutoCAD Buffer Overflow DoS

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially created malicious PDF file...

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

The U.S. Secret Service on Tuesday said it took down a network of electronic devices located across the New York tri-state area that were used to threaten U.S. government officials and posed an imminent threat to national security. "This protective intelligence investigation led to the discovery ...

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

The U.S. Secret Service on Tuesday said it took down a network of electronic devices located across the New York tri-state area that were used to threaten U.S. government officials and posed an imminent threat to national security. "This protective intelligence investigation led to the discovery ...

CVE-2025-51005

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at dochecksummathliveplay in tcpliveplay.c, leading to a possible denial of service...

HPE Aruba Networking EdgeConnect SD-WAN Data Protection Failure

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to circumvent existing security...