ROS-20251125-07

Apache Tomcat application server vulnerability is related to incorrect resource release. Exploitation exploitation of the vulnerability could allow a remote attacker to cause a denial of service. Apache Tomcat application server vulnerability is associated with failure to take measures to...

ROS-20251125-09

Apache Tomcat application server vulnerability is related to incorrect resource release. Exploitation exploitation of the vulnerability could allow a remote attacker to cause a denial of service. Apache Tomcat application server vulnerability is associated with failure to take measures to...

The vulnerability of the memdup_user_nul() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the memdupusernul function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

CVE-2025-13524

CVE-2025-13524 affects AWS Wickr, Wickr Gov, and Wickr Enterprise desktop builds prior to 6.62.13 on Windows, macOS, and Linux. The issue is improper resource release in the call termination process, which may allow a call participant to continue receiving audio input from another user after clos...

EUVD-2025-198502

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

PT-2025-47800

Name of the Vulnerable Software and Affected Versions AWS Wickr versions prior to 6.62.13 Description A flaw exists in the call termination process that may allow a call participant to continue receiving audio input from another user after closing their call window. This issue occurs in AWS Wickr...

CVE-2025-13524: Improper Resource Shutdown or Release

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require...

Amazon Web Services Wickr 安全漏洞

Amazon Web Services Wickr is an end-to-end encryption service from Amazon.com, Inc. A security vulnerability exists in Amazon Web Services Wickr versions prior to 6.62.13 that stems from improper resource release during call termination, which could result in continued receipt of audio input...

CVE-2025-64734

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

EUVD-2025-197912

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

CVE-2025-64734

Missing Release of Resource after Effective Lifetime CWE-772 in the T21 Reader allows an attacker with physical access to the Reader to perform a denial-of-service attack against that specific reader, preventing cardholders from badging for entry. This issue affects Command Centre Server: 9.30...

CVE-2025-64734

The CVE-2025-64734 entry concerns a resource handling flaw (Missing Release of Resource after Effective Lifetime, CWE-772) in the Gallagher T-Series Reader. The vulnerability can permit a physical-attacker to cause a denial-of-service against a specific reader, blocking cardholders from badging. ...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53198)

xen: issue of resource not being properly released in xenbusdevprobe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504533; scriptversion"1.2";...

Gallagher T-Series Reader 安全漏洞

The Gallagher T-Series Reader is a card reader in an access control system from Gallagher of New Zealand. A security vulnerability exists in the Gallagher T-Series Reader that stems from improper resource release and could lead to a denial of service attack...

The vulnerability of the esw_inline_mode_to_devlink() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the eswinlinemodetodevlink function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchoffloads.c file of the Mellanox Ethernet adapter support driver for Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an...

The vulnerability of the iavfremove function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the iavfremove function in Linux operating systems is related to improper release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Siemens SIMATIC S7-1500 Missing Release of Resource after Effective Lifetime (CVE-2024-2398)

When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit 1000, libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead lea...