Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS prior to 26.4 and Apple iPadOS prior to 26.4...

The vulnerability of the acm_bind() function in the drivers/usb/gadget/function/f_acm.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the acmbind function in the drivers/usb/gadget/function/facm.c file of the Linux device driver framework is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release in the handleRequestInternal function of the Session Handler component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation There is no fixed versi...

The vulnerabilities of the functions ucsi_init() and ucsi_unregister() in the driver drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver for the Linux operating system allow a malicious actor to cause service failure remotely.

The vulnerability of the functions ucsiinit and ucsiunregister in the UCSI driver’s drivers/usb/typec/ucsi/ucsi.c file is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the _bfd_elf_slurp_version_tables() function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfslurpversiontables function in the bfd/elf.c component of the GNU Binutils development environment is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the ResolveNodeIdToIp function in the SMF component. An attacker can cause a service disruption by sending specially crafted requests remotely. Remediation Upgrade...

The vulnerability of the nonstatic_release_resource_db() function in the drivers/pcmcia/rsrc_nonstatic.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nonstaticreleaseresourcedb function in the drivers/pcmcia/rsrcnonstatic.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the ANGLE library in Google Chrome browsers relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service

Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...

CVE-2025-53596

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2023-53934

A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improper input validation enables remote attackers to potentially disrupt service availability through maliciously constructed requests...

CVE-2025-3012

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed...

Atlassian Confluence < 8.5.25 / 8.6.x < 9.2.7 / 9.3.x < 10.0.2 (CONFSERVER-100907)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-100907 advisory. - A vulnerability introduced in Confluence Data Center 2.0 allows a unauthenticated remote attacker to render the host unavailable for its intended...

Astra Linux - уязвимость в openvswitch

Buffer overflow in the lldpdecode function in daemon/protocols/lldp.c in lldpd before 0.8.0 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via vectors involving large management addresses and TLV boundaries...

The vulnerability of the cross-platform Xen kernel supervisor in Linux operating systems, related to the swapping of the zero pointer, allows a malicious actor to trigger a service failure.

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the inavi_add_ientry function in the FFmpeg multimedia library, which allows a hacker to trigger a service failure.

The vulnerability of the inaviaddientry function in the FFmpeg multimedia library is related to improper memory release before deleting the last reference. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the Internet Key Exchange Version 2 (IKEv2) function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause service interruptions.

The vulnerability of the Internet Key Exchange Version 2 IKEv2 function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to the absence of memory release after the effective lifespan. Exploitation of this vulnerability can allow a malicious actor ...

The vulnerability of the fnic_wq_cmpl_handler function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fnicwqcmplhandler function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `nvmet_tcp_set_queue_sock` function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmettcpsetqueuesock function in Linux kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the dell_rbu function in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the dellrbu function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...