CVE-2025-47287

Summary: CVE-2025-47287 affects Tornado (Python Tornado) where the multipart/form-data parser can log an excessive amount of messages and continue parsing, causing a DoS due to synchronous logging. All versions prior to 6.5.0 are affected; a patch is available in Tornado 6.5.0/6.50. Affects: Torn...

Python 资源管理错误漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. Python suffers from a resource management error vulnerability that stems from improper error handling when using...

iPadOS iOS Information Disclosure

The vulnerability of iPadOS and iOS operating systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose confidential information by connecting to the device...

MS-EVEN Protocol Code Execution

The vulnerability of the MS-EVEN protocol EventLog Remoting Protocol for Windows operating systems is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Data Corruption

org.eclipse.jetty:jetty-server is vulnerable to Data Corruption. The vulnerability is due to improper buffer management caused by the incorrect release of a buffer when handling gzip errors during request body inflation, allows attackers to access sensitive data from other requests...

ROS-20250514-01

A vulnerability in the iiosimpledummytriggerh function of driver drivers/iio/dummy/iiosimpledummybuffer.c of the Linux kernel's IIO stub driver support is related to the use of an uninitialized resource. an uninitialized resource. Exploitation of the vulnerability could allow an attacker to gain...

Microsoft Edge Information Disclosure

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

Microsoft Virtual Machine Bus Code Execution

The vulnerability of the Microsoft Virtual Machine Bus VMBus component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Qualcomm Embedded Software Race Situation DoS

The vulnerability of embedded Qualcomm software programs is related to synchronization errors when using a common resource “Race Situation”. Exploiting this vulnerability can allow an attacker to cause a service failure...

D-Link Router Code Execution

The vulnerability of D-Link DIR-618 and DIR-605L router microprogramming software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-618 Router Code Execution

The vulnerability of the /goform/formTcpipSetup function in D-Link DIR-618 and DIR-605L router microprogramming software is related to access control errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Alibaba Cloud Linux 3 : 0107: libXpm (ALINUX3-SA-2024:0107)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0107 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-43788: A vulnerability was found ...

CVE-2024-56526

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error...

CVE-2024-56526

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error...

kernel: drm/amdgpu: the warning dereferencing obj for nbio_v7_4

A flaw was found in the Linux kernel's drm/amdgpu component. A local attacker with low privileges could trigger a null pointer dereference by interacting with the nbiov74 functionality when the rasmanager object is null. This could lead to a system crash, resulting in a denial of service...

kernel: HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

A flaw was found in the Linux kernel's AMD Sensor Fusion Hub SFH Human Interface Device HID driver. Improper memory cleanup during the device's initialization process can lead to memory errors and system instability. A local attacker with low privileges could exploit this to trigger page faults,...

kernel: ext4: don't set SB_RDONLY after filesystem errors

A flaw was found in the Linux kernel's handling of filesystem errors. When a filesystem encounters an error and is configured to remount as read-only, the kernel's attempt to apply this setting can conflict with other filesystem operations, specifically during filesystem freezing. This conflict c...

kernel: dm array: fix releasing a faulty array block twice in dm_array_cursor_end

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dmarraycursorend When dmbmreadlock fails due to locking or checksum errors, it releases the faulty block implicitly while leaving an invalid output pointer behind. The caller ...

kernel: ovl: Filter invalid inodes with missing lookup function

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovldentryweird function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause error...

Invalid login error is show when FAS is enabled on Rocky Linux 9.2

You deploy Rocky Linux 9.x FAS is configured and works fine on other OS like Windows, Ubuntu Issue is seen only with RHEL 9.x or Rocky Linux 9.x Invalid login prompt is thrown. Preauthentication errors are noticed in ctxkrb debug tool when installed for debug purposes on the Linux VDA...