CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

CVE-2025-1059

CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device...

PT-2025-6804 · Schneider Electric · Enerlin'X Ife Interface

Name of the Vulnerable Software and Affected Versions: Schneider Electric - Enerlin’X IFE interface LV434001 versions All Description: A Denial-of-Service issue exists due to improper input validation, which can be triggered by sending malicious IPV6 packets to the device. This could cause the...

PT-2025-6803 · Unknown · Enerlin'X Ife Interface

Name of the Vulnerable Software and Affected Versions: Enerlin'X IFE interface LV434001 versions all Description: The issue is related to improper input validation, which could cause a Denial-of-Service when malicious ICMPV6 packets are sent to the device. Recommendations: For all versions, at th...

PT-2025-6827 · Schneider Electric · Asco 5310 Single-Channel Remote Annunciator

Name of the Vulnerable Software and Affected Versions: Schneider Electric - ASCO 5310 Single-Channel Remote Annunciator versions all Description: A vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device. This issue is related to...

CVE-2024-35279

A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to...

CVE-2024-35279

A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to...

CVE-2024-35279

A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to...

CVE-2024-35279

CVE-2024-35279 is a stack-based buffer overflow in Fortinet FortiOS CAPWAP control handling that affects FortiOS 7.2.4–7.2.8 and 7.4.0–7.4.4. A remote, unauthenticated attacker can exploit crafted UDP packets to execute arbitrary code via the CAPWAP control path, assuming FortiOS stack protection...

CVE-2024-35279

A stack-based buffer overflow CWE-121 vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to...

Astra Linux – Vulnerability in OpenSSH

A flaw was discovered in the OpenSSH package. For each ping packet received by the SSH server, a pong packet is allocated in a memory buffer and stored in a queue of packets. This memory buffer is only freed after the server/client key exchange is completed. A malicious client may continue to sen...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: usb: qmiwwan: fix a memory leak for non-IP packets. Free the unused skb objects when no non-IP packets arrive...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bonding: Fix for xfrm realdev null pointer dereference We should not set realdev to NULL, because packets may still be in transit, and xfrm might call xdodevoffloadok in parallel. All callbacks assume that realdev is set. Example...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: r8169: Fixed possible ring buffer corruption due to fragmented Tx packets. An issue was discovered in the RTL8125b driver when transmitting small, fragmented packets. Invalid entries were inserted into the transmit ring buffer,...

The vulnerability of the InnoDB component in the Oracle Database Server system allows a hacker to gain privileged access, modify data, or cause service failures.

The vulnerability of the InnoDB component in the Oracle Database Server system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain privileged access, modify data, or cause service failures through network packets...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to read data or modify data.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain read access to data or modify data using network packets...

PT-2025-6205 · Siemens · Simatic S7-1200 Cpu +1

Name of the Vulnerable Software and Affected Versions: SIMATIC S7-1200 CPU versions 6ES7211-1BE40-0XB0 through 6ES7217-1AG40-0XB0 SIPLUS S7-1200 CPU versions 6AG1212-1AE40-2XB0 through 6AG1215-1AF40-5XB0 Description: A vulnerability has been identified in certain SIMATIC S7-1200 CPUs, where...

UBUNTU-CVE-2025-24970

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead...

Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50033)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50033 advisory. - In the Linux kernel, the following vulnerability has been resolved: slip: make slhcremember more robust...