A TPM 2.0 flaw (CVE-2025-2884) allows local attackers to access sensitive memory or cause DoS. Update TPM firmware to protect trusted computing.
Denial of Service
A DoS flaw in CoreDNS (CVE-2025-47950) allows unauthenticated attackers to crash servers using DNS-over-QUIC. Update to 1.12.2 immediately or disable QUIC.
A new DoS vulnerability (CVE-2025-48866) found in ModSecurity WAF can crash your web application. Update to 2.9.10 immediately!
Axis Communications releases critical patches for AXIS OS vulnerabilities, including privilege escalation flaws. Update your devices to stay protected.
A high-severity Siemens SiPass flaw allows unauthenticated remote attackers to cause a denial-of-service condition. Update to V2.95.3.18.
Unauthenticated remote attackers can crash Cisco ISE via RADIUS, enabled by default. CVE-2025-20152 fix released—patch now to prevent DoS.
A high-severity BIND DNS server vulnerability allows remote attackers to crash servers using malformed TSIG signatures. Urgent update advised.
A critical DNSdist vulnerability allows unauthenticated attackers to launch DoS attacks, disrupting DNS operations. Update now to secure your system.
High DoS risk in Multer! These flaws threaten millions of Node.js applications. Update now to avoid these attacks.
Tornado is vulnerable to DoS attacks due to its default parser. Details on CVE-2025-47287 and how to mitigate the high-severity threat.
Zoom fixes critical CVE-2025-30663 flaw allowing local privilege escalation. Users urged to update Workplace apps and SDKs to version 6.4.0 or newer.
Critical stack overflow in libexpat (CVE-2024-8176) allows DoS and potential memory corruption via malicious XML. Update to 2.7.0 now!
CVE-2025-46728 in cpp-httplib allows memory exhaustion via chunked requests. Patch to v0.20.1 to prevent denial-of-service attacks.
A preauth DoS flaw in Windows Deployment Services allows attackers to crash systems via spoofed UDP packets, warns researcher Zhiniang Peng.
Critical DoS vulnerability (CVE-2025-30194) impacts PowerDNS DNSdist 1.9.0-1.9.8 with DoH. Upgrade to 1.9.9 or use h2o provider.
Apache Tomcat patches CVE-2025-31650 and CVE-2025-31651 to fix denial of service and rewrite rule bypass issues. Upgrade now to stay secure.
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!
Perl has a heap buffer overflow (CVE-2024-56406) vulnerability in the "tr" operator, potentially causing DoS. Update to Perl 5.40.2 or 5.38.4 to fix
CVE-2024-0132: This report details how an incomplete NVIDIA Container Toolkit patch allows container escape and denial-of-service (DoS) attacks, affecting AI systems and Docker on Linux
Critical vulnerabilities discovered in Voyager, an open-source Laravel admin panel. Learn about the CVE-2024-55417 flaws and their impact on website security.
Critical vulnerabilities in BIND DNS software: CVE-2024-11187 and CVE-2024-12705. Understand the risks of denial-of-service attacks on DNS servers and resolvers.