The vulnerability of the lookup_ioctl() function in the drivers/md/dm-ioctl.c module of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the lookupioctl function in the drivers/md/dm-ioctl.c module of the Linux support driver for multiple devices such as RAID and LVM is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sanity_check_curseg() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sanitycheckcurseg function in the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the tuningctl_set() function in the sound subsystem’s module sound/pci/hda/patch_ca0132.c allows a attacker to access protected information or cause a service failure.

The vulnerability of the tuningctlset function in the sound subsystem of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

Google Go Denial of Service Vulnerability (CNVD-2026-10647)

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google. A denial of service vulnerability exists in Google Go, which stems from the use of a hyperlinear filename indexing algorithm, and can be exploited by an attacker to cause a denial...

CVE-2025-8590

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R Industry and Trade Inc. SKSPro allows Directory Indexing.This issue affects SKSPro: through 07012026...

The vulnerability in the `get_gpio_i2c_info()` function of the `drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c` driver file, a part of the Direct Rendering Infrastructure (DRI) graphics driver framework for AMD GPUs with Linux operating systems. This vulnerability allows an attacker to cause a system failure.

The vulnerability of the getgpioi2cinfo function in the drivers/gpu/drm/amd/display/dc/bios/biosparser2.c file, a driver for the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems, is related to unvalidated array indexing. Exploiting this vulnerability could allo...

CVE-2025-8590

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affects SKSPro: through 07012026...

CVE-2025-8590

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affects SKSPro: through 07012026...

EUVD-2025-206745

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing.This issue affects SKSPro: through 07012026...

CVE-2025-8590

CVE-2025-8590 concerns AKCE Software Technology R&D Industry and Trade Inc. SKSPro, where an Exposure of Sensitive Information to an Unauthorized Actor occurs due to directory indexing. Affected software: SKSPro, with impact through version 07012026. Root cause: directory indexing exposure that c...

CVE-2025-8590 Information Disclosure in AKCE Software's SKSPro

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affects SKSPro: through 07012026...

CVE-2025-8590 Information Disclosure in AKCE Software's SKSPro

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc. SKSPro allows Directory Indexing. This issue affects SKSPro: through 07012026...

AKCE SKSPro 信息泄露漏洞

AKCE SKSPro is a medical quality management system developed by the Turkish company AKCE. The versions of AKCE SKSPro prior to 07012026 contained a vulnerability related to information leakage. This vulnerability resulted from sensitive information being exposed to unauthorized participants, whic...

PT-2026-6004

Name of the Vulnerable Software and Affected Versions AKCE Software Technology R&D Industry and Trade Inc. SKSPro versions through 07012026 Description An issue exists in AKCE Software Technology R&D Industry and Trade Inc. SKSPro that allows directory indexing, potentially leading to exposure of...

Affiliate Pro 跨站脚本漏洞

Affiliate Pro is an alliance management system developed by JD Web Designer individuals. Version 1.7 of Affiliate Pro contains a cross-site scripting vulnerability. This vulnerability stems from multiple reflective cross-site scripting vulnerabilities in the input fields of the indexing module,...

BIT-GOLANG-2025-61728 Excessive CPU consumption when building archive index in archive/zip

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

The vulnerability of the name_size() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the namesize function in the Linux operating system’s kernel is related to incorrect array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

AZL-78929 CVE-2025-61728 affecting package golang 1.25.7-1

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

CVE-2025-61728

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...

UBUNTU-CVE-2025-61728

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...