CVE-2025-42874 Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius)

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

CVE-2025-42874

SAP NetWeaver remote service for Xcelsius is affected by CVE-2025-42874. The vulnerability arises from insufficient input validation and improper handling of remote method calls, allowing an attacker with network access and high privileges to execute arbitrary code on the affected system. Exploit...

PT-2025-49764

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

ownCloud < 10.15.3 Multiple Vulnerabilities

ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; if description...

CVE-2025-42874: Asymmetric Resource Consumption (Amplification)

SAP NetWeaver remote service for Xcelsius allows an attacker with network access and high privileges to execute arbitrary code on the affected system due to insufficient input validation and improper handling of remote method calls. Exploitation does not require user interaction and could lead to...

CVE-2025-65573

Cross Site Request Forgery CSRF vulnerability in AllskyTeam AllSky v2024.12.0606 allows remote attackers to cause a denial of service via function handleinterfacePOSTandstatus...

Post-quantum X509 Signature Algorithms

This plugin detects which post-quantum TLS signature algorithms are supported by the remote service. TRUSTED...

TLS Supported Groups

This plugin detects which TLS supported groups entries are supported by the remote service. TRUSTED...

The vulnerability of the in_docker plugin’s extract_name function in the Fluent Bit log collection and processing tool allows a attacker to cause a service failure.

The vulnerability of the indocker plugin of the extractname tool in Fluent Bit’s logging and processing tool is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

Vulnerability of the ath12k_dp_mon_rx_deliver_msdu()) function in the drivers/net/wireless/ath/ath12k/dp_mon.c file of the wireless device support module for the Ath12k chip in the Linux kernel. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the ath12kdpmonrxdelivermsdu function in the drivers/net/wireless/ath/ath12k/dpmon.c file of the wireless device support module in the Linux kernel is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the copy_from_user() function in the arch/sparc/lib/U3memcpy.S module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the copyfromuser function in the arch/sparc/lib/U3memcpy.S file of the Linux operating system’s kernel is related to the lack of a check on the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication switches allows a intruder to cause a service failure.

The vulnerability of the Modbus RTU protocol implementation in DIRIS Digiware M-70 communication gateways is related to the absence of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the Item_direct_view_ref::derived_field_transformer_for_where function in the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the Itemdirectviewref::derivedfieldtransformerforwhere function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the JOIN::fix_all_splittings_in_plan function in the MariaDB database management system allows a attacker to cause a service failure.

The vulnerability of the JOIN::fixallsplittingsinplan function in the MariaDB database management system is related to improper behavior. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2025-20750

A security vulnerability exists in the Modem component of MediaTek Chipsets due to improper input validation . This flaw can lead to a system crash , resulting in a remote denial of service (DoS) . The attack can be executed if a User Equipment (UE) connects to a rogue base station controlled by ...

EUVD-2025-200137

Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from a logic error and could lead to a remote denial of service attack...

CVE-2025-61617

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-11133

CVE-2025-11133 affects the Unisoc nr modem. The issue stems from improper input validation in the modem software, enabling a remote attacker to cause a system crash and remote denial of service without extra privileges. Affected products are Unisoc chipsets that include the nr modem component; Re...

The vulnerability of the sub_4F55C() function in the Tenda AX1803 router’s microprogramming system allows a hacker to induce a service failure.

The vulnerability of the sub4F55C function in the Tenda AX1803 router’s microprogramming system is related to buffer overflows in the stack when processing the wanMTU parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...