Vulnerability of IBM AIX and IBM VIOS operating systems, related to initialization errors, allows attackers to gain access to write arbitrary files.

The vulnerability of the IBM AIX and IBM VIOS operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain access to and modify any files at will...

The vulnerability of the hci_suspend_notifier() function in the net/bluetooth/hci_core.c file of the Linux operating system’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hcisuspendnotifier function in the net/bluetooth/hcicore.c file of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the Splunk MCP Server application, related to authentication errors, allows a violator to circumvent the restrictions on allowed commands in the MCP (Model Context Protocol).

The vulnerability of the Splunk MCP Server data processing and analysis application is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the restrictions on allowed commands in the MCP Model Context Protocol...

The vulnerability of the ice_ptp_extts_event() function in the drivers/net/ethernet/intel/ice/ice_ptp.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the iceptpexttsevent function in the drivers/net/ethernet/intel/ice/iceptp.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker t...

The vulnerability of the __flush_work() function in the kernel/workqueue.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the flushwork function in the kernel/workqueue.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SAP GUI graphical user interface for Windows, related to access control errors, allows a intruder to disclose protected information and execute arbitrary code.

The vulnerability of the SAP GUI graphical user interface for Windows relates to access control errors. Exploiting this vulnerability allows an attacker to disclose protected information and execute arbitrary code...

EUVD-2025-204633

In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF Windows and DOS End-of-Record EOR characters in delimited files, an issue was identified: using an incorrect EOR configuration can cause inaccurate parsing and leave personally...

CVE-2025-14591

In Delphix Continuous Compliance version 2025.3.0 and later, following a recent bug fix to correctly handle CR+LF Windows and DOS End-of-Record EOR characters in delimited files, an issue was identified: using an incorrect EOR configuration can cause inaccurate parsing and leave personally...

CVE-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

CVE-2025-59529 simple protocol server ignores accepts unlimited connections and logs failures without limit

Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although CLIENTSMAX ...

CVE-2025-59529

Avahi (up to version 0.9-rc2) is vulnerable because the simple protocol server ignores the documented CLIENTS_MAX limit: server_work() unconditionally accepts new connections and client_new() always appends a client, with no check against the limit. This allows unprivileged local users to exhaust...

CVE-2022-50686

An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via Portal Engine form control error messages. Detailed error messages can expose internal system information and potentially reveal implementation details to unauthorized users...

CVE-2022-50686 Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure

An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via Portal Engine form control error messages. Detailed error messages can expose internal system information and potentially reveal implementation details to unauthorized users...

php: PHP Hostname Null Character Vulnerability

A flaw was found in PHP. The fsockopen function and related functions fail to validate NULL characters within the provided hostname, potentially leading to unexpected behavior during parsing. This flaw allows a network attacker to supply a specially crafted hostname. This issue can result in a...

php: pgsql extension does not check for errors during escaping

A flaw was found in PHP. Missing error checking could result in SQL injection, and missing error handling could lead to crashes due to null pointer dereferences...

Mozilla Firefox < 7.0

The version of Firefox installed on the remote Windows host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2011-41 advisory. - Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service application cras...

The vulnerability of the crypto/af_alg.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the crypto/afalg.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and cause service failures through a specially created HTML page...

The vulnerability of the HR platform MOTIVITY, related to errors in access control, allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the HR platform MOTIVITY is related to errors in access control. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

The vulnerability of the do_secure_storage_access() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dosecurestorageaccess function arch/s390/mm/fault.c in the Linux operating system kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...