CVE-2023-53090 drm/amdkfd: Fix an illegal memory access

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix an illegal memory access In the kfdwaitonevents function, the kfdeventwaiter structure is allocated by alloceventwaiters, but the event field of the waiter structure is not initialized; When copyfromuser fails in...

CVE-2022-49886

The CVE-2022-49886 issue affects the Linux kernel related to x86/tdx memory handling. The vulnerability stems from how private memory (TDX private memory, including kernel stacks/text) may trigger a virtualization exception (#VE) and the difficulty of handling such exceptions. The root cause desc...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to defects in exception handling in the MODULEPARMDESC function. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-17605 · Fireeye · Fireeye Edr Agent

Name of the Vulnerable Software and Affected Versions: FireEye EDR agent affected versions not specified Description: A malicious third party could invoke a persistent denial of service issue in FireEye EDR agent by sending a specially-crafted tamper protection event to the HX service to trigger ...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to defects in exception handling in the mxcjpegprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the svcrdma component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the svcrdma component in the Linux operating system’s kernel is related to defects in exception handling in the svcrdmaprocinit function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mptcp_subflow_queue_clean() function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the mptcpsubflowqueueclean function in the net/mptcp/subflow.c module of the MPTCP protocol implementation in the Linux operating system is related to improper cleaning when handling exceptions. Exploiting this vulnerability can allow a attacker to cause service failures...

CVE-2025-31935

CVE-2025-31935 concerns Subnet Solutions PowerSYSTEM Center. The issue is described as a mishandling of exceptional conditions: crafted data passed to the API can trigger an exception, resulting in a denial-of-service condition. CVSS metrics indicate a Local attack vector with Low attack complexi...

The vulnerability of the Linux operating system’s kernel, related to defects in exception handling, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to deficiencies in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-20946

Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction...

tomcat: Apache Tomcat: Authentication bypass when using Jakarta Authentication API

A flaw was found in Apache Tomcat when configured to use a custom Jakarta Authentication formerly JASPIC ServerAuthContext component. This vulnerability allows authentication bypass via improperly handled exceptions during the authentication process...

PHP 安全漏洞

PHP is a scripting language for PHP that is executed server-side. A security vulnerability exists in PHP versions prior to 8.3.19 and prior to 8.4.5, which stems from a code sequence involving the set handler or the ??? = operators and exceptions in a code sequence could lead to a post-release...

The vulnerability of the iommu_report_device_fault() function in the Linux kernel’s IOMMU support driver allows a attacker to trigger a service failure.

The vulnerability of the iommureportdevicefault function in the Linux kernel’s IOMMU support driver is related to deficiencies in exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a powerful continuous integration and continuous delivery CI/CD tool developed by JetBrains. JetBrains TeamCity suffers from an information disclosure vulnerability that stems from mishandling of an exception that results in the disclosure of credentials on the cloud...

LlamaIndex Improper Handling of Exceptional Conditions vulnerability

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

CVE-2024-12704

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

CVE-2024-12704 Denial of Service (DoS) in run-llama/llama_index

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

PT-2025-12140

Name of the Vulnerable Software and Affected Versions run-llama/llama index version v0.12.5 Description A vulnerability in the LangChainLLM class allows for a Denial of Service DoS attack. The stream complete method executes the llm using a thread and retrieves the result via the get response gen...