The vulnerability of the drm/sched component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drm/sched component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability in the `fs/hfsplus/xattr.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/hfsplus/xattr.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability in the scsi/libiscsi.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the scsi/libiscsi.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the powerpc/eeh module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the powerpc/eeh module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability in the mm/vmalloc.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability in the mm/vmalloc.c component of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the drm/imagination component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/imagination component in the Linux operating system is related to state management errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

The vulnerability of the pinctrl-msm component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the pinctrl-msm component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the Object and Environment Tech components of the JD Edwards EnterpriseOne Tools system management resource management solution allows a malicious actor to gain access to read, modify, and delete data.

The vulnerability of the Object and Environment Tech components of the JD Edwards EnterpriseOne Tools system management resource solution is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

The vulnerability of the Foxit PDF Reader (formerly Foxit Reader) and the Foxit PDF Editor (formerly Foxit PhantomPDF) software lies in pointer assignment errors, allowing an attacker to execute arbitrary JavaScript code.

The vulnerability of the Foxit PDF Reader formerly Foxit Reader and the Foxit PDF Editor formerly Foxit PhantomPDF document viewing software is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to execute arbitrary JavaScript code using a specially crafted...

The vulnerability of tmptcp components in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of tmptcp components in the Linux operating system is related to state management errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the rtw89 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the rtw89 component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2025-67724 Tornado vulnerable to Header Injection and XSS via reason argument

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, the supplied reason phrase is used unescaped in HTTP headers where it could be used for header injection or in HTML in the default error page where it could be used for XSS and can be exploited by...

CVE-2025-66452 LibreChat's lack of JSON parsing error handling can lead to XSS

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json includes user input in the error message, which gets reflected in responses. User input including HTML/JavaScript can be exposed in error...

EUVD-2025-202928

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json includes user input in the error message, which gets reflected in responses. User input including HTML/JavaScript can be exposed in error...

CVE-2025-66452 LibreChat's lack of JSON parsing error handling can lead to XSS

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json includes user input in the error message, which gets reflected in responses. User input including HTML/JavaScript can be exposed in error...

CVE-2025-66452

LibreChat (versions ≤ 0.8.0) is affected by a lack of handling for JSON parsing errors in express.json(). A SyntaxError triggered by user input can be reflected in error responses, exposing input (including HTML/JavaScript) and creating an XSS risk if Content-Type isn’t strictly enforced. The iss...

EUVD-2024-55320

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0 all versions, FortiManager 6...

CVE-2025-58408

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger reads of stale data that can lead to kernel exceptions and write use-after-free. The Use After Free common weakness enumeration was chosen as the stale data can include handles to resources in whi...

SUSE CVE-2025-14322

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

The vulnerability of the Shell command shell in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the Shell command shell in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...