Cisco NX-OS Software 安全漏洞

Cisco NX-OS Software is a data center-level operating system software used by switches from the American company Cisco. There are security vulnerabilities in Cisco NX-OS Software, which stem from improper handling of specific fields in LLDP frames. These vulnerabilities may lead to unexpected...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the PFCP Association Setup Request process. An attacker can cause service disruption and trigger reconnection loops by sending a malformed request that is incorrectly accepted, resulting in an inconsisten...

Expected Behavior Violation

Overview Affected versions of this package are vulnerable to Expected Behavior Violation via the PFCP Association Setup Request process. An attacker can cause service disruption and trigger reconnection loops by sending a malformed request that is incorrectly accepted, resulting in an inconsisten...

The vulnerability of the library, related to asymmetrical resource consumption, allows a hacker to cause a service failure.

The vulnerability of the library system is related to asymmetric resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2025-69232 free5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption

free5GC is an open-source project for 5th generation 5G mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to free5gc smf up to and including 1.4.0, have an Improper Input Validation and Protocol Compliance vulnerability leading to Denial of Service. Remote...

PT-2026-21564

Name of the Vulnerable Software and Affected Versions free5GC go-upf versions prior to 1.2.8 Description The go-upf component of free5GC, a User Plane Function UPF implementation for 5G networks, contains a Heap-based Buffer Overflow. A specially crafted PFCP Session Modification Request with an...

Vulnerability of the lpfc_rcv_plogi() function in the drivers/scsi/lpfc/lpfc_nportdisc.c module – The SCSI device support driver for the Linux operating system, which allows a hacker to cause service failure.

Vulnerability of the lpfcrcvplogi function in the drivers/scsi/lpfc/lpfcnportdisc.c module – The Linux SCSI device driver has a vulnerability related to improper memory release. Exploiting this vulnerability could allow an attacker to cause service failure...

The vulnerability of the function function_show() in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB gadget driver framework allows a malicious actor to cause a service failure.

The vulnerability of the function functionshow in the drivers/usb/gadget/udc/core.c file of the Linux operating system’s USB gadget driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the SMB2_sess_auth_rawntlmssp_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a hacker to induce a service failure.

The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the attach_default_qdiscs() function in the net/sched/sch_generic.c module of the net/sched/sch subsystem of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the attachdefaultqdiscs function in the net/sched/schgeneric.c module of the network scheduling subsystem of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the lpfc_issue_els_flogi() function in the drivers/scsi/lpfc/lpfc_els.c module of the Linux SCSI device support driver allows a attacker to cause a service failure.

The vulnerability of the lpfcissueelsflogi function in the drivers/scsi/lpfc/lpfcels.c file of the Linux SCSI device support driver leads to a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-20777

The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webhook handler. This is due to the plugin only validating webhook signatures when the stripe-webhook-signing-secret setting is configured,...

CVE-2026-23596 Unauthenticated Improper Access Control in management API allows unauthorized service disruption

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

CVE-2026-23596 Unauthenticated Improper Access Control in management API allows unauthorized service disruption

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

PT-2026-20307

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in the management API that could allow a remote attacker without authentication to initiate service restarts. Exploitation of this issue may lead ...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An attacker can cause service disruption...

PT-2026-8008

Name of the Vulnerable Software and Affected Versions free5GC version 4.0.1 Description An improper input validation and protocol compliance issue exists in free5GC version 4.0.1. The UPF component incorrectly accepts a malformed PFCP Association Setup Request, violating 3GPP TS 29.244. This lead...

CVE-2026-25949 Traefik: TCP readTimeout bypass via STARTTLS on Postgres

Traefik is an HTTP reverse proxy and load balancer. Prior to 3.6.8, there is a potential vulnerability in Traefik managing STARTTLS requests. An unauthenticated client can bypass Traefik entrypoint respondingTimeouts.readTimeout by sending the 8-byte Postgres SSLRequest STARTTLS prelude and then...

CVE-2026-0485

SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Management Server CMS to crash and automatically restart. By repeatedly submitting these requests, the attacker could induce a persistent service disruption, renderin...