15205 matches found
CVE-2024-42642
CVE-2024-42642 affects Micron/Crucial MX500 Series SSDs (model M3CR046) with the SM2259 controller. The vulnerability is a buffer overflow triggered by specially crafted ATA packets to the drive controller, leading to potential memory corruption. Public documentation specifies three bug classes i...
ROS-20240904-04
A vulnerability in the libndp library is related to an operation exceeding buffer boundaries in memory. Exploitation The vulnerability could allow an attacker to affect the confidentiality, integrity, and availability of protected information by sending specially crafted IPv6 packets. availabilit...
kernel: virtio-net: tap: mlx5_core short frame denial of service
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
kernel: virtio-net: tun: mlx5_core short frame denial of service
A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...
kernel: r8169: Fix possible ring buffer corruption on fragmented Tx packets.
in linux kernel r8169, when transmitting small fragmented packets, invalid entries were inserted into the transmit ring buffer, leading to calls to dmaunmapsingle with a null address...
CVE-2024-42058
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V5.20 through V5.38, and USG20W-VPN series firmware versions from V5.20 through V5.38 cou...
CVE-2024-42058
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V5.20 through V5.38, and USG20W-VPN series firmware versions from V5.20 through V5.38 cou...
CVE-2024-42058
A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50W series firmware versions from V5.20 through V5.38, and USG20W-VPN series firmware versions from V5.20 through V5.38 cou...
CVE-2024-42058
CVE-2024-42058 is a null pointer dereference vulnerability in Zyxel devices: Zyxel ATP firmware v4.32–v5.38, USG FLEX v4.50–v5.38, USG FLEX 50(W) v5.20–v5.38, and USG20(W)-VPN v5.20–v5.38. It allows an unauthenticated attacker to cause DoS by sending crafted packets, with network attack vector an...
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 安全漏洞
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 is a personal weighing scale from BPL. A security vulnerability exists in BPL Personal Weighing Scale PWS-01BT IND/09/18/599 that originates from sending sensitive information in unencrypted BLE packets...
CVE-2024-34463
The CVE-2024-34463 vulnerability affects BPL Medical Technologies’ PWS-01BT devices and Be Well Android app, with sensitive data sent in unencrypted BLE packets and lacking authentication/integrity protection. Connected sources (Red Hat, CISA ICS) confirm cleartext transmission and potential inte...
PT-2024-25917 · Bpl · Bpl Personal Weighing Scale Pws-01Bt
Name of the Vulnerable Software and Affected Versions: BPL Personal Weighing Scale PWS-01BT IND/09/18/599 Description: The BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity...
PT-2025-11100 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the hybrid access control list ACL processing of IPv4 packets could allow an unauthenticated, remote attacker to bypass a configured ACL. This issue is due ...
PT-2025-11097 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software version 7.9.2 Description: A vulnerability in the handling of specific packets that are punted from a line card to a route processor could allow an unauthenticated, adjacent attacker to cause control plane traffic to sto...
NTP NAK To The Future
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NTP "NAK to the Future"', 'Description' = %q Crypto-NAK packets can be used to cause ntpd to accept time from unauthenticated ephemeral symmetric...
Kaillera 0.86 Server Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Kaillera 0.86 Server Denial of Service' , 'Description' = %q The Kaillera 0.86 server can be shut down by sending any malformed packet after the...
PT-2024-30091
Name of the Vulnerable Software and Affected Versions Micron Crucial MX500 Series Solid State Drives version M3CR046 Description The issue is related to a Buffer Overflow that can be triggered by sending specially crafted ATA packets from the host to the drive controller. Recommendations For Micr...
Cisco IKE Information Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IKE Information Disclosure', 'Description' = %q A vulnerability in Internet Key Exchange version 1 IKEv1 packet processing code in Cisco IO...
kernel: netfilter: bridge: confirm multicast packets before passing them up the stack
A security vulnerability was identified in the Linux kernel's netfilter subsystem, specifically affecting the handling of multicast and broadcast packets on network bridges. The issue arises from a race condition in the connection tracking conntrack module when processing cloned socket buffers sk...
