UBUNTU-CVE-2025-34458

wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

CVE-2025-34458 wb2osz/direwolf <= 1.8.1 Reachable Assertion DoS

wb2osz/direwolf Dire Wolf versions up to and including 1.8.1, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...

CVE-2025-26379

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

CVE-2025-61740

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device...

EUVD-2025-204712

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device...

CVE-2025-26379

CVE-2025-26379 concerns Johnson Controls PowerG products (IQ Panels2, 2+, IQHub, IQPanel 4). The issue is use of a cryptographically weak pseudo-random number generator, enabling an attacker to read or inject encrypted PowerG packets. Documents consistently cite the weak PRNG as the root cause an...

CVE-2025-61739

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

CVE-2025-61739

CVE-2025-61739 concerns nonce reuse that enables a replay attack or decryption of captured packets. Documents identify the affected products as Johnson Controls IQ Panels2, IQ Panels2+, IQHub, IQPanel 4, and PowerG, with the issue rooted in nonce reuse and/or weak RNG affecting confidentiality an...

EUVD-2025-204703

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

CVE-2025-59301

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service...

CVE-2025-59301 Modbus/TCP Dos Vulnerability in DVP15MC11T

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service...

EUVD-2025-204691

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service...

CVE-2025-59301 Modbus/TCP Dos Vulnerability in DVP15MC11T

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service...

PT-2025-52651

Name of the Vulnerable Software and Affected Versions Network Device affected versions not specified Description An issue exists where authentication does not properly verify the source of network packets. This could allow an attacker to create a denial-of-service condition or modify the device...

Delta Electronics DVP15MC11T security vulnerability

The Delta Electronics DVP15MC11T is a multi-axis motion controller from Delta Electronics China. A denial of service vulnerability exists in the Delta Electronics DVP15MC11T, which stems from improper validation of modbus/tcp packets and can be exploited by an attacker to cause a denial of servic...

Johnson Controls IQ series and Johnson Controls PowerG have security vulnerabilities

The Johnson Controls IQ series and Johnson Controls PowerG are both products of Johnson Controls, Inc.The Johnson Controls IQ series is a series of intelligent security and automation control platforms.The Johnson Johnson Controls PowerG is a communications device. A security vulnerability exists...

Dire Wolf security vulnerabilities

Dire Wolf is a software radio modem from the individual developers at wb2osz. A security vulnerability exists in Dire Wolf 1.8 and earlier versions, which stems from a reachable assertion vulnerability in the APRS MIC-E decoder that could lead to a denial of service...

CVE-2025-26379: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets...

CLSA-2025-1765997462 unbound: Fix of CVE-2024-8508

CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks...

SUSE-SU-2026:20015-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50253: bpf: make sure skb-len != 0 when redirecting to a tunneling device bsc1249912. - CVE-2025-37916: pdscore: remove write-after-free of clientid bsc1243474. -...