kernel: Linux kernel: vsock vulnerability may lead to memory corruption

A flaw was found in the Linux kernel's vsock component. This vulnerability occurs when a connect operation on an already established socket is interrupted by a signal or timeout, causing the system to mishandle the socket's state. This incorrect handling can lead to a race condition, potentially...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause service interruptions.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable due to insufficient validation of input data. Exploitation of this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the oggdmx_parse_tags() function on the GPAC multimedia platform allows a perpetrator to trigger a service failure.

The vulnerability of the oggdmxparsetags function on the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the vobsub_get_subpic_duration() function on the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the vobsubgetsubpicduration function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory when processing SUB-files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the fromAdvSetMacMtuWan() function in the Tenda AX3 Wi-Fi router software allows a hacker to trigger a service failure.

The vulnerability of the fromAdvSetMacMtuWan function in the Tenda AX3 Wi-Fi router software lies in the fact that the operation’s results are stored outside of the buffer in memory when processing the wanMTU2 parameter. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the GSF demuxer filter (gsfdmx) component of the GPAC multimedia platform, which allows a hacker to cause a service failure.

The vulnerability of the GSF demuxer filter gsfdmx in the GPAC multimedia platform involves reading beyond the buffer boundaries in memory during GSF file processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the search and detection function for micro-programmed wireless access points from Hikvision allows a intruder to trigger a service failure.

The vulnerability of the search and detection function for Hikvision wireless access points is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...

The vulnerability of the formSetAdInfoDetails() function (/goform/setAdInfoDetail) in the Tenda M3 router software allows a hacker to cause a service failure.

The vulnerability of the formSetAdInfoDetails function /goform/setAdInfoDetail in the Tenda M3 router software is related to the issue where an operation is executed outside the buffer in memory when processing parameters such as adName, smsPassword, smsAccount, weixinAccount, weixinName,...

The vulnerability of the 389-ds-base package for Debian GNU/Linux and Red Hat Enterprise Linux systems allows a hacker to trigger a service failure.

The vulnerability of the 389-ds-base package for Debian GNU/Linux and Red Hat Enterprise Linux relates to the use of a zero pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

CVE-2021-27430

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR...

The vulnerability of the H5C__load_entry() function in the H5Centry.c file of the HDF5 library allows a hacker to trigger a service failure.

The vulnerability of the H5Cloadentry function in the H5Centry.c file of the HDF5 library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious individual to cause service interruptions...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

CVE-2025-15035: Improper Input Validation

Improper Input Validation vulnerability in TP-Link Archer AXE75 v1.6 vpn modules allows an authenticated adjacent attacker to delete arbitrary server file, leading to possible loss of critical system files and service interruption or degraded functionality.This issue affects Archer AXE75 v1.6: ≤...

The vulnerability of the Undertow web server, related to uncontrolled recursion, allows attackers who operate remotely to cause service interruptions.

The vulnerability of the Undertow web server is related to uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992971 advisory. In the Linux kernel, the following vulnerability has been resolved: nbd: Fix hung when signal interrupts nbdstartdeviceioctl syzbot reported hung task 1. The followi...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993166)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993166 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/transfd: always use ONONBLOCK read/write syzbot is reporting hung task at p9fdclose 1, for...

The vulnerability of the CmpVisuServer component in the CODESYS industrial automation software suite allows a malicious individual to trigger a service failure.

The vulnerability of the CmpVisuServer component in the CODESYS industrial automation software suite is related to data type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the administrator console of the Zimbra Collaboration Suite email management system allows a hacker to trigger a service failure.

The vulnerability of the administrator console of the Zimbra Collaboration Suite email management system involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted GET request...

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the web page rendering module in WebKit operating systems for macOS, iOS, and iPadOS is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...