CVE-2025-1575

A vulnerability classified as problematic has been found in Harpia DiagSystem 12. Affected is an unknown function of the file /diagsystem/PACS/atualatendimentojpeg.php. The manipulation of the argument cod/codexame leads to improper control of resource identifiers. It is possible to launch the...

CVE-2024-5706 Hitachi Vantara Pentaho Data Integration & Analytics - Improper Control of Resource Identifiers ('Resource Injection')

The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. CWE-99 Hitachi Vantara Pentaho Data Integration & Analytics versions before...

The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure network access control tools arises from the improper assignment of permissions for critical resources. This allows attackers to increase their privileges.

The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure network access control tools is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the hci_unregister_dev() function (net/bluetooth/hci_core.c) in the Linux operating system’s Bluetooth kernel driver allows a attacker to cause a service failure.

The vulnerability of the hciunregisterdev function net/bluetooth/hcicore.c in the Linux operating system’s Bluetooth kernel driver is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the i40e_xdp_setup() function (drivers/net/ethernet/intel/i40e/i40e_main.c) in the Linux kernel driver for the i40e driver allows a hacker to cause a service failure.

The vulnerability of the i40exdpsetup function drivers/net/ethernet/intel/i40e/i40emain.c in the Linux kernel driver for the i40e chip is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the CoreMedia component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a hacker to trigger a service failure.

The vulnerability of the CoreMedia component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the i915_gem_object_is_shrinkable() function in the DRM driver (drivers/gpu/drm/i915/gem/i915_gem_object.h) of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the i915gemobjectisshrinkable function in the DRM driver drivers/gpu/drm/i915/gem/i915gemobject.h of the Linux kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow a hacker to cause service failures...

Ollama < 0.1.34 Multiples Vulnerabilities

According to the self-reported version in its response header, the version of Ollama hosted on the remote web server is 0.1.34. It is, therefore, affected by a Multiples vulnerabilities : - A Remote Code Execution through models pulling - An Improper Resource Shutdown or Release through the...

The vulnerability of the ks8851 component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ks8851 component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the HTTP client library for Python urllib3, related to improper resource transfer between components, allows attackers to gain unauthorized access to protected information.

The vulnerability of the HTTP client library for Python urllib3 is related to improper handling of the Proxy-Authorization header during redirects between sources. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2024-49602

Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x contain an improper resource unlocking vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-49602

Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x contain an improper resource unlocking vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service...

The vulnerability of the mm component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the mm component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cfg80211 component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the cfg80211 component in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-31152

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions...

CVE-2024-31152

The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application, where a series of crafted HTTP requests can cause a reboot. This could lead to network service interruptions...

CVE-2024-31152

The CVE-2024-31152 issue affects LevelOne WBR-6012 routers (firmware R0.40e6). The root cause is improper resource allocation in the router’s web application, causing a flood of crafted HTTP requests to crash/reboot the device. Specifically, a flood of valid HTTP POSTs to /cgi-bin/logi can trigge...

LevelOne WBR-6012 Web Application improper resource allocation vulnerability

Talos Vulnerability Report TALOS-2024-1982 LevelOne WBR-6012 Web Application improper resource allocation vulnerability October 30, 2024 CVE Number CVE-2024-31152 SUMMARY The LevelOne WBR-6012 router with firmware R0.40e6 is vulnerable to improper resource allocation within its web application,...

The vulnerability of the Bluetooth smart watch technology from Fire-Boltt: an artillery smart watch that allows a violator to disconnect the user from the application or expose protected information.

The vulnerability of the Bluetooth smart watch technology Fire-Boltt Artillery Smart Watch lies in improper cleaning or release of resources. Exploiting this vulnerability could allow a malicious actor to disconnect the user from the application or expose the protected information...