CVE-2025-61301

Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits o...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a migration operation competing with a fallocating hole that could cause folio to remain mapped without bein...

The vulnerability of the Internet Information Services component in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Internet Information Services component in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Data Sharing Service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Data Sharing Service for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

RockyLinux 10 : kernel (RLSA-2025:17776)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17776 advisory. kernel: HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 kernel: wifi: ath12k: Decrement TID on RX peer frag setup error handling...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the login process. An attacker can determine the existence of user accounts by analyzing differences in error messages presented during authentication attempts. Remediation Upgrade ibexa/user to version 5.0.3 or...

ibexa/user login enumerates user accounts

Impact In v5, error messages could provide enough information to tell whether a user exists or not. This is resolved by ensuring the error messages are sufficiently ambigious. Patches See "Patched versions". Workarounds None. Resources...

JLSEC-2025-80 An issue was discovered in libxml2 before 2.10.4

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to...

PT-2025-46055

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double free. This behavior occurs because there is an attempt to...

The vulnerability of the Graphics component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Graphics component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Connected Devices Platform Service for Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Connected Devices Platform Service for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Simple Search and Discovery Protocol (SSDP) service for Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Simple Search and Discovery Protocol SSDP service for Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Network Connection Status Indicator (NCSI) function in Windows operating systems, which allows a hacker to exploit their privileges

The vulnerability of the Network Connection Status Indicator NCSI function in Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerabilities (USN-7823-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7823-1 advisory. It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could...

The vulnerability of the Windows Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the igel-flash-driver module for IGEL operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the igel-flash-driver module in IGEL operating systems is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability in the `drivers/scsi/ses.c` module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/ses.c module of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the imx_dsp_rproc() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the imxdsprproc function in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f2fs_remount() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the f2fsremount function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Remote Access Connection Manager in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...