PT-2025-52291

Name of the Vulnerable Software and Affected Versions omec-project UPF versions upf-epc-pfcpiface:2.1.3-dev Description A denial-of-service issue exists in the omec-project UPF pfcpiface component. Specifically, a PFCP Session Establishment Request containing a CreateFAR with an invalid IPv4...

CVE-2025-65288

CVE-2025-65288 affects Mercury MR816v2. The reported issue is a buffer overflow in the device when accepting excessively long hostnames from LAN hosts, due to unchecked copies/concatenations into fixed-size buffers. Impact described as crash (DoS) with potential remote code execution. Affected pr...

kernel: sctp: linearize cloned gso packets in sctp_rcv

A flaw use of uninitialized memory uncontrolled and invisible by attacker in the Linux kernel SCTP transport protocol was found in the way user triggers malicious SCTP packets. A remote user could use this flaw to crash the system. The bug actual only for systems where SCTP protocol being enabled...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41064)

powerpc/eeh: possible crash when edev-pdev changes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504739; scriptversion"1.3";...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : poppler vulnerability (USN-7858-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7858-1 advisory. It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a...

PT-2025-45483

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists due to improper handling of a malformed Connection Request. Specifically, when the interval is set to 1, which is an illegal value, and the chM is set to 0x7CFFFFFFFF, a crash is...

CVE-2025-61102

A NULL pointer dereference vulnerability was found in FRRouting within the showvtyextlinkadjsid function within ospfext.c. When the OSPF daemon ospfd is configured with the debug command debug ospf packet all send/recv detail, it attempts to display detailed information for OSPF packets. Under...

EUVD-2025-36385

IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the program to crash due to the incorrect calculation of the size of the data that is being pointed to...

CVE-2025-41724

CVE-2025-41724 affects Sauter modulo 6 devices (e.g., modu680-AS, modu660-AS, modu612-LC, EY-modulo 5 modu 5/ modu524/ modu525, ecos 5 ecos504/505). The issue is caused by an unauthenticated remote attacker sending incomplete SOAP requests that crash the wscserver; the watchdog does not restart t...

EUVD-2021-14645

Malware in sbrugna...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986372)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986372 advisory. In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset like when it...

udisks: Out-of-bounds read in UDisks Daemon

A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler, which handles requests sent through the D-BUS interface. As two of the parameters of this handle, it receives the file descriptor...

Linux Distros Unpatched Vulnerability : CVE-2011-0148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory...

CVE-2025-52547 DoS to the application services

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

Linux Distros Unpatched Vulnerability : CVE-2019-10051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Suricata 4.1.3. If the function filetrackernewchunk encounters an unsafe Somesfcm = ft.newchunk item, then the program enters an...

PT-2025-34407

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 6.6.56-05896-g89f5fb0eb30b and earlier. Description: A NULL dereference issue existed in the Linux kernel's rtw89 driver related to Wi-Fi functionality. Specifically, a problematic packet received on an unsupported 6 GHz...

CVE-2025-49175

A flaw was found in the X Rendering extension's handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIGPROCFS enabled. When testing a special configuration: CONFIGNETFSSUPPORTS=y CONFIGPROCFS=n The system crashes with something like: 3.766197 ------------ Cut here ------------ 3.766484...

PT-2025-29023

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The eir create adv data function may attempt to add EIR FLAGS and EIR TX POWER without verifying sufficient space, potentially leading to crashes. Recommendations: At the moment, there...

CVE-2025-2518 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...