HPESBCR04838 rev.1 - HPE Cray Operating System, Local Denial Of Service

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray Supercomputing Operating System Software prior to cos-base-3.2 - https://support.hpe.com/hpesc/docDisplay?docLocale=enUS&docId=a00146084enus CVSS Scores: | CVE | CVSS...

GHSA-M454-3XV7-QJ85 vulnerabilities

Vulnerabilities for packages: telegraf...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Vulnerability of the iwl_uefi_reduce_powerSection() function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – A driver for supporting Intel wireless connection adapters in Linux operating systems, which allows a hacker to cause a service failure

Vulnerability of the iwluefireducepowerSection function in the drivers/net/wireless/intel/iwlwifi/fw/uefi.c module – The driver for Intel wireless connection adapters in Linux operating systems is vulnerable to errors in its code. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the NFSv4 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the NFSv4 component in the Linux operating system is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the in_atomic core function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the inatomic kernel function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to cause service failures...

Voyager 安全漏洞

Voyager is an application by David Borland Personal Developer. A security vulnerability exists in Voyager versions 1.4.0 through 1.8.0 that originates from an authenticated administrator being able to execute arbitrary OS commands via specific php artisan commands...

The vulnerability of the Internet Key Exchange version 2 module in Cisco IOS XR operating systems allows a hacker to trigger a service failure.

The vulnerability of the Internet Key Exchange version 2 IKEv2 module in Cisco IOS XR operating systems is related to the use of incorrect authentication tokens due to unlimited resource allocation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Xen kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the xen component in the Linux operating system’s kernel is related to a memory leak in the xenbusdevprobe function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/Radeon kernel components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/Radeon kernel components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to incorrect blocking of resources in the cqthreadv3hw function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the PAN-OS operating system, related to insufficient checking of unusual or exceptional states, allows a perpetrator to trigger a service failure by sending a continuous stream of specially created LLDP packets.

The vulnerability of the PAN-OS operating system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a perpetrator to cause a service failure by sending a continuous stream of specially created LLDP packets...

The vulnerability of the fs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the fs component in the Linux operating system’s kernel is related to the use of an uninitialized resource in the ocfs2setattr function. Exploiting this vulnerability could allow a attacker to cause a service failure...

CVE-2025-2814

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

CVE-2025-2814 Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to...

Updated graphicsmagick packages fix security vulnerabilities

ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. CVE-2025-27795...

Advisory ROSA-SA-2025-2843

Software: gmp 6.1.2 OS: ROSA Virtualization 2.1 packageevrstring: gmp-6.1.2-11.rv3 CVE-ID: CVE-2021-43618 BDU-ID: 2022-05776 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the mpz/inpraw.c component of the GMP arithmetic operations library on 32-bit platforms is related to integer overflow...

Advisory ROSA-SA-2025-2845

Software: harfbuzz 1.7.5 OS: ROSA Virtualization 2.1 packageevrstring: harfbuzz-1.7.5-4.rv3 CVE-ID: CVE-2023-25193 BDU-ID: 2023-06149 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the hb-ot-layout-gsubgpos.hh component of the Harfbuzz text conversion library is associated with unrestricted resourc...

Advisory ROSA-SA-2025-2821

Software: perl-HTTP-Tiny 0.074 OS: ROSA Virtualization 3.0 packageevrstring: perl-HTTP-Tiny-0.074-3.rv30 CVE-ID: CVE-2023-31486 BDU-ID: 2023-03872 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Perl HTTP::Tiny programming language library is related to errors in the TLS certificate authenticati...

CVE-2025-30660

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS.When processing a high rate of specific GRE traffic destined to th...