The vulnerability of the inftlcore.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the inftlcore.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the veml6075.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the veml6075.c component in the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `net/sched/sch_sfq.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the net/sched/schsfq.c component of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the smu_sys_set_pp_table() function in the drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c kernel module of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the smusyssetpptable function in the drivers/gpu/drm/amd/pm/swsmu/amdgpusmu.c kernel module of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to access confidential data,...

The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tegra-se-aes.c and tegra-se-hash.c components of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the npcm-video.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the npcm-video.c component in the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the blkdev_read_iter() function in the block/fops.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the blkdevreaditer function in the block/fops.c component of the Linux operating system’s kernel is related to an unvalidated return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2025-39781

CVE-2025-60033 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-60033 Published : Sept. 26, 2025, 3:15 a.m. | 4 hours, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit, which allows a hacker to cause a service failure.

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

Park Ticketing Management System normal-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter fromdate in the file normal-bwdates-reports-details.php. A...

Tenda AC6 formSetIptv Function Command Injection Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a command injection vulnerability that stems from the formSetIptv function not validating or cleaning up special characters when handlin...

SUSE CVE-2025-55780

A null pointer dereference occurs in the function breakwordforoverflowwrap in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fzhtmlsplitflow to split a FLOWWORD node, but does not check if node-next is valid before accessing node-next-overflowwrap, resulti...

CVE-2025-58317

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2025-58319 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

NNCP 安全漏洞

NNCP is a storage application from the NNCP organization. A security vulnerability exists in NNCP versions prior to 8.12.0 that stems from a failure to validate paths when processing packets, which could lead to a path traversal attack...

PT-2025-39524

CVE-2025-59929 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-59929 Published : Sept. 24, 2025, 3:15 a.m. | 4 hours, 7 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Llama Stack 安全漏洞

Llama Stack is a model component of the Llama Stack API open-sourced by Meta Llama. A security vulnerability exists in Llama Stack versions prior to v0.2.20, which stems from the resolveastbytype function accepting unvalidated parameters, which could lead to remote code execution...

Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...