Medium: glibc

Issue Overview: The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffe...

Educare Education Management System 安全漏洞

Educare Education Management System is a course management online platform from Educare Nigeria. A security vulnerability exists in the Educare Education Management System version 1.0 that stems from a failure to perform proper authorization checks, which could result in unauthorized access or...

CVE-2025-55067

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

CVE-2025-55067 Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System

The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...

CVE-2025-34155 Tibbo AggreGate Network Manager < 6.40.05 Login Functionality User Enumeration

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

PT-2025-43550

Name of the Vulnerable Software and Affected Versions TLS4B ATG system affected versions not specified Description The TLS4B ATG system is susceptible to issues stemming from improper handling of Unix time values exceeding the 2038 epoch rollover. Upon reaching January 19, 2038, the system clock...

The vulnerability of the coredns DNS server, related to incorrect conversion of numerical value types, allows attackers to cause service failures.

The vulnerability of the coredns DNS server is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow a remote attacker to cause service failures...

EUVD-2022-54827

In the Linux kernel, the following vulnerability has been resolved: ftrace: Clean up hash directfunctions on register failures We see the following GPF when registerftracedirect fails: general protection fault, probably for non-canonical address \ 0x200000000000010: 0000 1 PREEMPT SMP...

The vulnerability of the btrfs_del inode_from_root() function in the fs/btrfs/inode.c module of the Linux kernel allows a attacker to cause a failure in the operation of the file system.

The vulnerability of the btrfsdel inodefromroot function in the fs/btrfs/inode.c module of the Linux kernel operating system is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Podman software for managing and starting OCI containers lies in the improper resolution of file access links, which allows a malicious actor to trigger a service failure.

The vulnerability of the Podman software for managing and starting OCI containers is related to improper permission handling before accessing the file. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the QueryParser() function in the Rack module’s interpreter for the Ruby programming language allows a hacker to cause a service failure.

The vulnerability of the QueryParser function in the Rack module’s interpreter for the Ruby programming language is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Windows Local Session Manager component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions from a remote location...

Improper Input Validation

datahihi1/tiny-env is vulnerable to Improper Input Validation. The vulnerability is due to missing sanitization of characters, allowing attackers to inject comment text that can cause misconfigurations or authentication failures...

dotnet: .NET Denial of Service Vulnerability

A flaw was found in MSBuild’s temporary directory handling on Linux where predictable, non-randomized temporary paths are used. Local users can create or manipulate those paths before MSBuild runs, causing build failures or unexpected behavior and resulting in denial of service for build operatio...

SUSE-SU-2025:03601-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpibuffer-pointer bsc1249770. - CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled...

The vulnerability of Eclipse Jetty servlet containers, related to resource exhaustion, allows attackers to trigger a service failure.

The vulnerability of Eclipse Jetty servlet containers is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Dark Web Roast - September 2025 Edition

Dark Web Roast - September 2025 Edition By Trellix Advanced Research Center · October 14, 2025 Executive Summary September 2025 brought us a delightful buffet of underground incompetence that makes one wonder if cybercriminals are actively competing for the "Most Spectacular Failure" award. From...

Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, Data Domain OS operating system—related to the occurrence of operations outside the buffer in memory, allowing attackers to trigger a service failure.

The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...

The vulnerability of the torch.cummin interface in the PyTorch machine learning framework allows a attacker to induce a service failure.

The vulnerability of the torch.cummin interface in the PyTorch machine learning framework is related to insufficient exception handling. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS—due to incorrect path name restrictions in the restricted access directory—allows unauthorized individuals to gain unauthorized access to the compromised system and trigger service failure.

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...