7728 matches found
CVE-2025-61661
CVE-2025-61661 affects the GRUB2 bootloader. The vulnerability stems from the USB string conversion handling, allowing a local attacker with a malicious USB device connected during boot to trigger inconsistent length values, potentially crashing GRUB (DoS) and possibly causing data corruption (im...
CVE-2025-61661 Grub2: grub2: out-of-bounds write via malicious usb device
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CISA Releases Six Industrial Control Systems Advisories
CISA released six Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-322-01 Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio ICSA-25-322-02 Shel...
PT-2025-47379
Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A flaw exists in the GRUB bootloader due to improper handling of string conversion when processing information from a USB device. Specifically, the bootloader is susceptible to inconsistent leng...
Siemens SIPROTEC 5 Allocation of Resources Without Limits or Throttling (CVE-2025-40570)
Affected devices do not properly limit the bandwidth for incoming network packets over their local USB port. This could allow an attacker with physical access to send specially crafted packets with high bandwidth to the affected devices thus forcing them to exhaust their memory and stop respondin...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46675)
usb: dwc3: core: A vulnerability where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and other memory issues in Exynos platforms. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41035)
USB: core: duplicate endpoint bug. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504502; scriptversion"1.2";...
GNU GRUB 安全漏洞
GNU GRUB is a Linux system boot program from the GNU community. A security vulnerability exists in GNU GRUB that stems from improper handling of USB device string conversion, which could result in a denial of service or data corruption...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56531)
ALSA: caiaq: OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup. This plugin only works with Tenable.ot. Please visit...
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to insufficient restrictions on authentication attempts. This allows a intruder to gain unauthorized access to protected information.
The vulnerability of the PowerChute Serial Shutdown software for controlling uninterruptible power sources is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow an intruder operating remotely to gain unauthorized access to protected...
The vulnerability of the xhci_handle_stopped_cmd_ring() function in the drivers/usb/host/xhci-ring.c module of the Linux device driver support library allows a attacker to compromise the accessibility of protected information.
The vulnerability of the xhcihandlestoppedcmdring function in the drivers/usb/host/xhci-ring.c module of the Linux device support driver for USB chipsets is related to the use of an unreliable pointer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...
The vulnerability of the software for controlling uninterruptible power supplies (UPS) from PowerChute Serial Shutdown, related to the improper use of standard permissions, allows a intruder to increase their privileges.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power sources is related to the improper use of standard permissions. Exploiting this vulnerability can allow an intruder to increase their privileges...
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to incorrect restrictions on the path name to the restricted access directory. This allows a intruder to increase their privileges.
The vulnerability of the PowerChute Serial Shutdown software for managing uninterruptible power supplies is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow an attacker to increase their privileges...
The vulnerability of the liteuart_probe() function in the drivers/tty/serial/liteuart.c module of the console TTY support driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the liteuartprobe function in the drivers/tty/serial/liteuart.c file of the console TTY driver in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-8870
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870 On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870 On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153...
CVE-2025-8870
CVE-2025-8870 affects Arista EOS. The vulnerability arises from how serial console input is handled, potentially causing an unexpected device reload. Affected EOS releases include 4.34.2FX for certain 710X-series platforms; not all EOS platforms are affected. The Red Hat and NVD entries corrobora...