Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk

About the vulnerability The CVE-2024-2658 vulnerability was discovered in 2024 within the FlexNet Publisher component of the Schneider Electric Floating License Manager. This software handles license management across various Schneider Electric products used for comprehensive industrial automatio...

Tenda F453 Router Code Execution

The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda F453 router software lies in the issue where the operation exits beyond the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute...

UTT HiPER 810G strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/formApMail in the UTT HiPER 810G router software lies in the fact that the operation’s results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

UTT HiPER 810G Router strcpy Buffer Overflow DoS

The vulnerability of the strcpy function /goform/NTP in the UTT HiPER 810G router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

OCFS2 Heap Buffer Overflow DoS

The vulnerability of the ocfs2stackglueinit function in the fs/ocfs2/stackglue.c file of the OCFS2 file system in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

D-Link DIR-513 Router Buffer Overflow

The vulnerability of D-Link DIR-513 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the webPage parameter. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux kcm_rfree reserve_rx_kcm DoS

The vulnerability of the functions kcmrfree and reserverxkcm in the net/kcm/kcmsock.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260626-73-0022

The vulnerability of the :find function in the text editor Vim is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service interruptions...

ROS-20260626-73-0040

The vulnerability of the ngxquicmodule module in NGINX Plus and NGINX Open Source web servers relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260626-73-0015

The vulnerability of the ASN.1 library Libtasn1 is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Tenda i3 Wireless Access Point Code Execution

The vulnerability of the formWifiMacFilterGet function /goform/WifiMacFilterGet in the Tenda i3 wireless access point software is related to the operation of writing data outside of the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow a malicious act...

ROS-20260626-73-0028

The vulnerability in ImageMagick 7 is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260626-73-0026

The vulnerability in rubygem-rdiscount relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Tenda F453 Router fromSetCfm() Code Execution

The vulnerability of the fromSetCfm function /goform/setcfm of the Tenda F453 router software lies in the fact that the operation’s output goes beyond the buffer in memory when processing the funcname and funcpara1 parameters. Exploiting this vulnerability allows a remote attacker to execute...

CVE-2026-53221

A flaw was found in the Linux kernel, specifically within the ip6vti component responsible for managing IPv6 tunnels. This vulnerability arises from an error in the vti6tnllookup function, which incorrectly matches network tunnels by failing to properly verify wildcard addresses during fallback...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the selector lexer process. An attacker can cause a panic and potentially disrupt service availability by providing a quoted string with a trailing backslash. Remediation There is no fixed version...

github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing

A flaw was found in containerd, an open-source container runtime. A remote attacker could exploit this vulnerability by providing a maliciously crafted image. When a container is created from this image, it leads to uncontrolled resource consumption and memory exhaustion, causing the containerd...

Linux driver module Heap Buffer Overflow DoS

The vulnerability in the drivers/hid/hid-core.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux net/ipv6 icmp Heap Buffer Overflow DoS

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or caus...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the net/core/dev.ct module in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...