PT-2025-42262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CAN Controller Area Network subsystem, specifically within the hi311x driver. Sending a PF PACKET can bypass the CAN framework's logic and directly...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 Corporation. A security vulnerability exists in F5 BIG-IP, which originates from a bd process that may repeatedly terminate when th...

Fuji Electric V-SFT Out-of-Bounds Read Vulnerability

Fuji Electric V-SFT is a human-machine interface HMI configuration software developed by Fuji Electric FujiElectric, which is mainly used for touch-screen interface design, PDF document viewing, video playback, alarm message management and other functions in the field of industrial automation. Fu...

JLSEC-2025-62 An issue was discovered in libexpat before 2.6.3

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XMLParseBuffer...

kernel: net: usb: smsc75xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be larger than the actual socket buffer length up to 9026 bytes. In such case the cloned skb passed up the network stack will leak kerne...

CVE-2025-41706

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...

CVE-2025-41706

CVE-2025-41706 affects the Phoenix Contact webserver used in the QUINT4-UPS/24DC/24DC/10/EIP family. The issue is a denial-of-service condition that an unauthenticated remote attacker can trigger by sending a specially crafted GET request with an over-long Content-Length header. The vulnerability...

CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...

EUVD-2025-34148

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...

CVE-2025-41706 Phoenix Contact: Webserver Denial of Service through Malformed Content-Length

The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality...

Linux Distros Unpatched Vulnerability : CVE-2022-31129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient...

PT-2025-41856

Name of the Vulnerable Software and Affected Versions Webserver affected versions not specified Description The webserver is susceptible to a denial of service condition. An unauthenticated remote attacker can exploit this by sending a specially crafted GET request with an excessively long...

RHEL 9 : kernel (RHSA-2025:17958)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17958 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: usb: smsc75xx: Limit...

PT-2025-48138

Name of the Vulnerable Software and Affected Versions glib affected versions not specified Description A heap-based buffer overflow issue exists in glib due to an incorrect buffer size calculation within the g escape uri string function. When processing a string containing a substantial number of...

Tenda CH22 formSafeEmailFilter Function Memory Corruption Vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. The Tenda CH22 suffers from a memory corruption vulnerability that originates from the formSafeEmailFilter function parameter page in file /goform/SafeEmailFilter that fails to properly validate the length of the input data, which can ...

Linux Distros Unpatched Vulnerability : CVE-2025-39957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: increase scanieslen for S1G Currently the S1G capability element is not taken into account for the scanieslen, which leads to a buffer length...

Tenda AC18 upnpEn Parameter Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter upnpEn in the file /goform/SetUpnpCfg fails to correctly...

Linux Distros Unpatched Vulnerability : CVE-2023-53652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vdpa: Add features attr to vdpanlpolicy for nlattr length check The vdpanlpolicy structure i...

Tenda AC18 wanSpeed Parameter Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which stems from the failure of the wanSpeed parameter in the fromAdvSetMacMtuWan function to...

CVE-2025-11617

CVE-2025-11617 describes a missing validation check in FreeRTOS-Plus-TCP’s IPv6 packet processing that can cause an out-of-bounds read when handling IPv6 packets with incorrect payload lengths. Affected component is the IPv6 processing path in FreeRTOS-Plus-TCP; issue is limited to IPv6-enabled a...