Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56603)

net: afcan: do not leave a dangling sk pointer in cancreate. On error cancreate frees the allocated sk object, but sockinitdata has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later. This plugin only works...

HPE Aruba Networking AOS-CX 安全漏洞

HPE Aruba Networking AOS-CX is a series of switch devices from HPE America. A security vulnerability exists in the HPE Aruba Networking AOS-CX that stems from a platform-level denial-of-service vulnerability that could cause the switch to fail to boot...

PT-2026-2514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's SCSI target functionality. Specifically, if memory allocation for cmd-t task cdb fails, the pointer remains NULL and is subsequently dereferenced,...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42077)

ocfs2: DIO failure due to insufficient transaction credits. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504618; scriptversion"1.3";...

The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the subtitle parser TMPlayer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the CacaoFormat::SetHilderbrandt function in software for converting chemical substance file formats, such as Open Babel, allows a hacker to cause a service failure.

The vulnerability of the CacaoFormat::SetHilderbrandt function in software for converting chemical substance file formats in Open Babel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Rack::Multipart::Parser class of the module interface between web servers and Rack web applications allows a attacker to cause a service failure.

The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the QEMU hardware emulation software, related to resource management operations after the expiration of their lifespan, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to trigger a service failure...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49957)

ocfs2: null-ptr-deref when journal load failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504593; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46737)

nvmet-tcp: kernel crash if commands allocation fails. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504475; scriptversion"1.2";...

Motex LanScope Endpoint Manager Remote Code Execution (CVE-2025-61932)

Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets. Note that Nessus has not tested for this issue but has instead relied only on th...

Siemens SCALANCE and RUGGEDCOM Devices Double Free (CVE-2024-46673)

scsi: aacraid: Fix double-free on probe failure. aacprobeone calls hardware-specific init functions through the aacdriverident::init pointer, all of which eventually call down to aacinitadapter. If aacinitadapter fails after allocating memory for aacdev::queues, it frees the memory but does not...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41068)

s390/sclp: sclpinit failure. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504592; scriptversion"1.2";...

CVE-2025-63291

When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...

kernel: of_numa: fix uninitialized memory nodes causing kernel panic

A flaw was found in the linux kernel ofnuma subsystem fails to properly initialize memory‑only NUMA nodes i.e., nodes without CPUs. When such nodes remain uninitialized, a subsequent call to freeareainit may access NODEDATA for those nodes and trigger a kernel panic due to a NULL pointer...

The vulnerability of the amdgpupci_error_detected() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s AMD GPU kernel support module allows a malicious actor to cause a service failure.

The vulnerability of the amdgpupcierrordetected function in the driver/gpu/drm/amd/amdgpu/amdgpudevice.c file of the Direct Rendering Infrastructure DRI support driver for AMD GPU cores in the Linux operating system is related to improper resource locking. Exploiting this vulnerability can allow ...

The vulnerability of the `ftrace_hash_ipmodify_update()` function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the ftracehashipmodifyupdate function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the program_check_common() function in the arch/powerpc/kernel/exceptions-64s.S file of the Linux operating system allows a malicious actor to cause a service failure.

The vulnerability of the programcheckcommon function in the arch/powerpc/kernel/exceptions-64s.S file of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the die_mce() function in the arch/powerpc/kernel/traps.c module, which is part of the PowerPC kernel support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the diemce function in the arch/powerpc/kernel/traps.c module of the PowerPC platform support for the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the a3xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a3xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver for direct rendering infrastructure support in Linux kernels.

The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...