32908 matches found
The vulnerability of the pnv_php component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the pnvphp component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the stmmac_tso_xmit() function in the drivers/net/ethernet/stmicro/stmmac/stmmac_main.c file of the Ethernet adapter support driver from STMicroelectronics’ operating system Linux allows a hacker to cause a service failure.
The vulnerability of the stmmactsoxmit function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the lack of proper validation for incoming requests. Exploiting this vulnerability could allow a...
The vulnerability of the slub.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the slub.c component in the Linux operating system’s kernel is related to the allocation of unlimited memory. Exploiting this vulnerability allows a perpetrator to cause a service failure...
The vulnerability of the drm/xe/vm components of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drm/xe/vm components of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the Linux operating system’s kernel driver allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel driver is related to the disclosure of information. Exploiting this vulnerability allows a perpetrator to cause service failures...
The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the sound/usb/validate.c component of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the scsi/bfa/bfad_im.c component in the Linux operating system allows a hacker to compromise data integrity and cause service failures.
The vulnerability of the scsi/bfa/bfadim.c component of the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...
The vulnerability in the driver/i2c/buses/i2c-qup.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/i2c/busses/i2c-qup.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the net/packet/afpacket.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the MySQL Server component of the database management system allows a hacker to cause a service failure.
The vulnerability of the MySQL Server database management system component lies in its unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
RLSA-2025:22854 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: Fix oops due to uninitialised variable CVE-2025-38737 kernel: can: j1939: implement NETDEVUNREGISTER notification handler CVE-2025-39925 kernel: Bluetooth: hcievent: Fix UAF in...
Sensitive Information Exposure
Jenkins ByteGuard Build Actions Plugin is vulnerable to sensitive information exposure. The vulnerability is due to improper masking of API tokens on the job configuration form, which allows an attacker to observe and capture these tokens...
CVE-2025-12834
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
BIT-MONGODB-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete
MongoDB Server may experience an invariant failure during batched delete operations when handling documents. The issue arises when the server mistakenly assumes the presence of multiple documents in a batch based solely on document size exceeding BSONObjMaxSize. This issue affects MongoDB Server...
CVE-2025-12834
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2025-12834 Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_message
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2025-12834 Accept Stripe Payments Using Contact Form 7 <= 3.1 - Reflected Cross-Site Scripting via failure_message
The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failuremessage' parameter in versions up to, and including, 3.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...
CVE-2025-12834
CVE-2025-12834 affects the WordPress plugin “Accept Stripe Payments Using Contact Form 7” and is due to insufficient input sanitization and output escaping in the failure_message parameter. The issue enables a Reflected XSS by unauthenticated attackers, who must lure a user to perform an action (...
SUSE CVE-2025-55074
Mattermost versions 10.11.x = 10.11.3, 10.5.x = 10.5.11 fail to enforce access permissions on the Agents plugin which allows other users to determine when users had read channels via channel member objects...