9219 matches found
CVE-2025-40210 Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
CVE-2025-40210
CVE-2025-40210 concerns the Linux kernel NFSD: NFSv4 COMPOUND operation cap. Public advisories describe that the change removing the cap on operations per COMPOUND can lead to a problematic state in pynfs COMP6 and a potential vulnerability if an attacker specifies an arbitrarily large op count i...
CVE-2025-40210 Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND"
In the Linux kernel, the following vulnerability has been resolved: Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" I've found that pynfs COMP6 now leaves the connection or lease in a strange state, which causes CLOSE9 to hang indefinitely. I've dug into it a little, but ...
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
A newly discovered campaign has compromised tens of thousands of outdated or end-of-life EoL ASUS routers worldwide, predominantly in Taiwan, the U.S., and Russia, to rope them into a massive network. The router hijacking activity has been codenamed Operation WrtHug by SecurityScorecard's STRIKE...
GHSA-MWCC-7VPP-XMV9 MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
Linux Distros Unpatched Vulnerability : CVE-2025-12119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mongocbulkoperationt may read invalid memory if large options are passed. CVE-2025-12119 Note that Nessus relies on the presence of the package as reported by...
Expired Pointer Dereference
Overview Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade mongo-c-driver to version 1.30.6 or higher. References - GitHub Commit...
DEBIAN-CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
UBUNTU-CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-12119 Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-12119 Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
CVE-2025-12119
A mongocbulkoperationt may read invalid memory if large options are passed...
Bulk write with options may read invalid memory
A mongocbulkoperationt may read invalid memory if large options are passed...
PT-2025-47407
Name of the Vulnerable Software and Affected Versions mongoc affected versions not specified Description A mongoc bulk operation t may encounter an issue where it reads invalid memory when handling large options. Recommendations At the moment, there is no information about a newer version that...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44969)
s390/sclp: vulnerability could lead to data corruption if a Store Data operation is interrupted and the halt attempt fails, which was resolved by preventing the release of data buffers in such cases. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Siemens SCALANCE and RUGGEDCOM Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-53241)
x86/xen: vulnerability due to issues with the PV iret hypercall through the hypercall page, which is fixed by directly coding the sequence in xen-asm.S to avoid problems with speculation mitigations. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
CVE-2025-31649
A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call...
CVE-2025-31649
CVE-2025-31649: Dell ControlVault WBDI Driver hard-coded password vulnerability in ControlVault3 prior to 5.15.14.19 and ControlVault3 Plus prior to 6.2.36.47. A specially crafted API call can lead to execution of privileged operations. TALOS confirms vulnerable versions (e.g., 5.14.3.0) and the ...