Security advisory: Uncontrolled Recursion and Use-After-Free vulnerabilities in Qt SVG module impact Qt

Two vulnerabilities in Qt SVG module have been discovered. Uncontrolled recursion vulnerability has been assigned the CVE id CVE-2025-10728. Whereas Use-After-Free vulnerability has been assigned the CVE id CVE-2025-10729. Uncontrolled recursion vulnerability in Qt SVG CVE-2025-10728 Affected...

PT-2025-40585

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.2 Description An uncontrolled resource consumption issue exists in Qsync Central. A remote attacker who obtains a user account can potentially launch a denial-of-service DoS attack. Recommendations Update ...

In the GNU C Library (aka glibc or libc6) through 2.29, check_dst_limits_calc_pos_1 in posix/regexec.c has Uncontrolled Recursion

...

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.

...

The vulnerability of the NEBOSV flight information system, related to uncontrolled resource consumption, allows a perpetrator to cause a service failure.

The vulnerability of the Flight Information System of the NBOS is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of Notepad++, related to the uncontrolled element in the search process, allows a hacker to execute arbitrary code.

The vulnerability of the Notepad++ text editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

CVE-2025-61595: Uncontrolled Resource Consumption

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...

CVE-2025-59684: Uncontrolled Search Path Element

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking...

CVE-2025-20370: Uncontrolled Resource Consumption

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role that contains the high-privilege capability changeauthentication, could send multiple LDAP bind requests to a specific...

Arbitrary File Creation

github.com/charmbracelet/soft-serve is vulnerable to Arbitrary file creation. The vulnerability is due to uncontrolled data being written through its SSH API, which allows an attacker to create or override arbitrary files...

CVE-2025-11149: Uncontrolled Resource Consumption

This affects all versions of the package node-static; all versions of the package @nubosoftware/node-static. The package fails to catch an exception when user input includes null bytes. This allows attackers to access http://host/%00 and crash the server...

The vulnerability of the mtk_star_emac.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtkstaremac.c component in the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dmub_hw_lock_mgr_inbox0_cmd() function in the dmub_hw_lock_mgr.c component of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the dmubhwlockmgrinbox0cmd function in the dmubhwlockmgr.c component of the Linux operating system leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hugetlbpage.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the hugetlbpage.c component in the Linux operating system is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: A vulnerability in Apache Commons Lang may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-48924)

Summary There is a vulnerability in Apache Commons Lang used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

CVE-2025-55559: Uncontrolled Resource Consumption

An issue was discovered TensorFlow v2.18.0. A Denial of Service DoS occurs when padding is set to 'valid' in tf.keras.layers.Conv2D...

Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Configuration Manager IP Edition (ITNCM) version 6.4.2 Fix Pack 23 (6.4.2.23)

Summary Multiple vulnerabilities were addressed in ITNCM version 6.4.2 Fix Pack 23 6.4.2.23 Vulnerability Details CVEID:CVE-2025-48924 DESCRIPTION: Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to...

CVE-2025-48392: Uncontrolled Resource Consumption

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

The vulnerability of Lenovo Browser lies in its uncontrolled search path element, which allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of Lenovo Browser is related to an uncontrolled search path element. Exploiting this vulnerability can allow a hacker to enhance their privileges and execute arbitrary code...