32971 matches found
SUSE CVE-2025-58075
Mattermost versions 10.11.x = 10.11.1, 10.10.x = 10.10.2, 10.5.x = 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the RelayState...
EUVD-2025-38260
Cross-Site Scripting XSS vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute arbitrary JavaScript code in the context of the user's browser session via crafted input in the Username Prefix field. The vulnerability exists due to improper sanitization of...
CVE-2025-41341
A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'iddenuncia' and 'seguro' in '/backend/api/buscarUsuarioByDenuncia.php'...
CVE-2025-27917
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. Remote Denial of Service can occur because of incorrect deserialization that results in failed memory...
The vulnerability of the first_kex_packet_follows() function in the libssh library, which allows a hacker to cause a service failure
The vulnerability of the firstkexpacketfollows function in the libssh library is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the hsr_get_port_ndev() function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the hsrgetportndev function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the smb2_set_ea() function in the fs/smb/client/smb2ops.c module allows a hacker to cause a service failure in the Linux operating system’s SMB kernel client.
The vulnerability of the smb2setea function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux kernel, relates to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the arp_reduce() and neigh_reduce() functions in the drivers/net/vxlan/vxlan_core.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the arpreduce and neighreduce functions in the drivers/net/vxlan/vxlancore.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nvmepciNRMs() function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver allows a attacker to cause a service failure.
The vulnerability of the nvmepciNRMs function in the drivers/nvme/host/pci.c module of the Linux NVME kernel driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the PSI (Pressure Stall Information) mechanism in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the PSI Pressure Stall Information mechanism in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the idxd_setup_wqs() function in the drivers/dma/idxd/init.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the idxdsetupwqs function in the drivers/dma/idxd/init.c file of the Linux kernel is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Rack::Multipart::Parser class in the module interface between web servers and Rack web applications allows a attacker to cause a service failure.
The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the SSID function in the __cfg80211_connect_result() module of the net/wireless/sme.c kernel of the Linux operating system, which allows a hacker to cause a service failure
The vulnerability of the SSID function in the cfg80211connectresult module of the net/wireless/sme.c kernel of the Linux operating system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the xcan_write_frame() function in the drivers/net/can/xilinx_can.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the xcanwriteframe function in the drivers/net/can/xilinxcan.c module of the Linux kernel lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the `fec_enetPhyResetAfterClkEnable()` function in the `drivers/net/ethernet/freescale/fec_main.c` file of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the fecenetPhyResetAfterClkEnable function in the drivers/net/ethernet/freescale/fecmain.c file of the Linux operating system kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the first_remote_rcu() function in the vxlan component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the firstremotercu function in the vxlan component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the unpoisonmemory() function in the mm/memory-failure.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the unpoisonmemory function in the mm/memory-failure.c module of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Rack::Multipart::Parser class in the module interface between web servers and Rack web applications allows a attacker to cause a service failure.
The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the Exiv2 metadata management library commands, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.
The vulnerability of the Exiv2 metadata management library commands relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...