The vulnerability of the virtio-net component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the virtio-net component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the drivers/s390 kernel component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s S390 kernel driver components is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Cisco IOS XE Software Cross-Site Scripting Vulnerability

Cisco IOS XE Software is a network operating system from the American company Cisco Cisco. A cross-site scripting vulnerability exists in Cisco IOS XE Software that originates from improper user input cleanup and can be exploited by an attacker to cause a reflective cross-site scripting attack...

The vulnerability of the chameleon_parse_gdd() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the chameleonparsegdd function in the Linux operating system is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mtk_star_emac.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mtkstaremac.c component in the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s USB kernel component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s USB kernel component is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ice_vc_add_fdir_fltr() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the icevcaddfdirfltr function in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the wcd937x_soc_codec_probe() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wcd937xsoccodecprobe function in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the openvswitch component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the openvswitch component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a failure in the system’s authentication process.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a perpetrator to cause a system failure...

The vulnerability of the xen-netfront.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xen-netfront.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-20293

creationtimestamp| type| source ---|---|--- 2025-09-26 08:27:34+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-cisco-ios-ja-ios-xe-laitteissa...

SonarQube 操作系统命令注入漏洞

SonarQube is a code inspection tool from Sonar Open Source. An operating system command injection vulnerability exists in SonarQube versions 4.0.0 through prior to 6.0.0, which stems from a failure to properly validate user input on the Windows runner and could lead to arbitrary command execution...

The vulnerability of the SNMP protocol implementation in Cisco IOS XE operating systems allows a intruder to trigger a maintenance failure.

The vulnerability of the SNMP protocol implementation in Cisco IOS XE operating systems lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

TOTOLINK X6000R OS Command Injection Vulnerability

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

The vulnerability of Cisco IOS XE operating systems, related to incorrect restrictions on path names in restricted access directories, allows attackers to circumvent existing security restrictions.

The vulnerability of Cisco IOS XE operating systems is related to incorrect restrictions on path names in the restricted access directory. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...

Dell Data Domain OS Auth Bypass (DSA-2025-159)

According to its self-reported version number, the version of Dell Data Domain OS is affected by an auth bypass vulnerability as disclosed in the DSA-2025-159 advisory: - Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15,...

The vulnerability of the command-line interface of Cisco IOS and IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of the command-line interface in Cisco IOS and IOS XE operating systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Interconnect switches allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Connectors is related to access control violations. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

CVE-2025-11005 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...