32875 matches found
The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Huawei EulerOS: Security Advisory for EDK2 (EulerOS-SA-2025-2571)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the function dce11_pplib_apply_display_requirements() in the driver drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c file, a driver for supporting AMD Linux operating system-based graphics cards’ Direct Rendering Infrastructure (DRI), allows a malicious actor to trigger a service failure.
The vulnerability of the dce11pplibapplydisplayrequirements function in the drivers/gpu/drm/amd/display/dc/clkmgr/dce110/dce110clkmgr.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards for Linux operating systems, is related to the use of pointer manipulation. Exploiting...
The vulnerability of GNUPlot’s plotting software, related to the manipulation of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of GNUPlot’s graph creation software relates to the handling of the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-13321
Mattermost Desktop App versions 6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive information via reading the application logs...
CVE-2025-61736
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...
most: usb: fix double free on late probe failure
...
CVE-2025-27063
Memory corruption during video playback when video session open fails with time out error...
CVE-2025-14303
Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are...
CVE-2025-14304
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory...
The vulnerability in the kernel module drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110HWSeq.c of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/gpu/drm/amd/display/dc/hwss/dce110/dce110hwseq.c kernel of the Linux operating system is related to the ability to access a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the QEMU hardware emulation software, related to the use of memory after it is freed, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
EulerOS Virtualization 2.13.0 : EDK2 (EulerOS-SA-2025-2571)
According to the versions of the EDK2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access. Successful...
EulerOS Virtualization 2.13.1 : EDK2 (EulerOS-SA-2025-2536)
According to the versions of the EDK2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : EDK2 contains a vulnerability in BIOS where an attacker may cause 'Protection Mechanism Failure' by local access. Successful...
The vulnerability of the crypto/af_alg.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the crypto/afalg.c component in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the do_secure_storage_access() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the dosecurestorageaccess function arch/s390/mm/fault.c in the Linux operating system kernel is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nic_valid_size() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the nicvalidsize function in the Linux operating system’s kernel is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-68109
ChurchCRM is an open-source church management system. In versions prior to 6.5.3, the Database Restore functionality does not validate the content or file extension of uploaded files. As a result, an attacker can upload a web shell file and subsequently upload a .htaccess file to enable direct...
CVE-2025-34438 AVideo < 20.1 IDOR Arbitrary Video Rotation
AVideo versions prior to 20.1 contain an insecure direct object reference vulnerability allowing users with upload permissions to modify the rotation metadata of any video. The endpoint verifies upload capability but fails to enforce ownership or management rights for the targeted video...
