CVE-2025-9998 Improper validation of packets sequencing

The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...

CVE-2025-9998

CVE-2025-9998 describes an issue where the sequence of packets received by a Networking server is not correctly checked, enabling a potential denial-of-service via specially crafted messages to force the application to stop. Multiple sources (NVD, Red Hat, CVE.org, CIRCL, VulnEnrichment) corrobor...

Linux Distros Unpatched Vulnerability : CVE-2018-1313

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and...

Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to denial-of-service attack, heap use after free, network server exploit, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-32873 DESCRIPTION: An issue was discovered in Django 4.2 before 4.2.2...

com.powsybl:powsybl-action-dsl (2.5.1), com.powsybl:powsybl-action-dsl-spi (2.5.1) +69 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (2.5.1)

com.powsybl:powsybl-commons MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 2.5.1 - com.powsybl:powsybl-action-dsl-spi 2.5.1 -...

com.powsybl:powsybl-action-dsl (2.6.1), com.powsybl:powsybl-action-dsl-spi (2.6.1) +63 more potentially affected by CVE-2025-48058 via com.powsybl:powsybl-commons (2.6.1)

com.powsybl:powsybl-commons MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 2.6.1 - com.powsybl:powsybl-action-dsl-spi 2.6.1 -...

com.powsybl:powsybl-action-dsl (1.1.0), com.powsybl:powsybl-action-dsl-spi (1.1.0) +43 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (1.1.0)

com.powsybl:powsybl-commons MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 1.1.0 - com.powsybl:powsybl-action-dsl-spi 1.1.0 -...

com.powsybl:powsybl-action-dsl (2.2.0), com.powsybl:powsybl-action-dsl-spi (2.2.0) +68 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (2.2.0)

com.powsybl:powsybl-commons MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 2.2.0 - com.powsybl:powsybl-action-dsl-spi 2.2.0 -...

com.powsybl:powsybl-action-dsl (2.6.1), com.powsybl:powsybl-action-dsl-spi (2.6.1) +63 more potentially affected by CVE-2025-47293 via com.powsybl:powsybl-commons (2.6.1)

com.powsybl:powsybl-commons MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-commons and may be impacted: - com.powsybl:powsybl-action-dsl 2.6.1 - com.powsybl:powsybl-action-dsl-spi 2.6.1 -...

CVE-2022-34022

SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDBActive...

CVE-2022-34021

Multiple Cross Site Scripting XSS vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields...

CVE-2020-28349

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...

CVE-2024-42025

A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers Linux with UniFi Network Application Version 8.3.32 and earlier allows a malicious actor with unifi user shell access to escalate privileges to root on the host device...

CVE-2023-20125

A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An...

CVE-2023-20125 Cisco BroadWorks Network Server TCP Denial of Service Vulnerability

A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An...

CVE-2023-20125: Uncontrolled Resource Consumption

A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting does not occur for certain incoming TCP connections. An...

Ubiquiti UniFi: Privilege Escalation

Background Ubiquiti UniFi is a Management Controller for Ubiquiti Networks UniFi APs. Description A vulnerability has been discovered in Ubiquiti UniFi. Please review the CVE identifier referenced below for details. Impact The vulnerability allows a malicious actor with a local operational system...

CVE-2024-42028

A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application Version 8.4.62 and earlier allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server...

CVE-2024-42028

A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application Version 8.4.62 and earlier allows a malicious actor with a local operational system user to execute high privilege actions on UniFi Network Server...

CVE-2024-42028

CVE-2024-42028 affects Ubiquiti UniFi Network Application (Self-Hosted UniFi Network Server) version 8.4.62 and earlier. A local attacker with a legitimate OS user can perform high-privilege actions on the UniFi Network Server. This is a local privilege-escalation issue with CVSS v3.x base score ...