3787 matches found
Rockwell Multiple Products Insufficient Protected Credentials Vulnerability
Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this...
HPESBNW05026 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking Wireless Operating Systems (AOS-8 and AOS-10) for Mobility Conductors, Controllers, Gateways, and Access Points.
Potential Security Impact: Remote: Bypass Security Restrictions, Denial of Service DoS, Unauthorized Data Injection, Unauthorized Data Modification, Unauthorized Read Access to Data SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 630 Series Access Points - Please refer to th...
ufshcd_cmd_inflight Heap Buffer Overflow DoS
The vulnerability of the ufshcdcmdinflight function in the drivers/ufs/core/ufshcd.c file affects UFS Universal Flash Storage host controllers. In Linux operating systems, this function is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow attackers to compromise...
USN-8029-3: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
CompactLogix PLC DoS
The vulnerability of the microprogrammed software in the CompactLogix 5370 programmable logic controllers is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause malfunctions in the system...
USN-8033-7: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
USN-8048-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
ESXi Base System Driver Unauthorized Access
The vulnerability of the ESXi base microprogramming system software for Intel 800 Series network controllers is related to improper resource release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-9292 Permissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers
A permissive web security configuration may allow cross-origin restrictions enforced by modern browsers to be bypassed under specific circumstances. Exploitation requires the presence of an existing client-side injection vulnerability and user access to the affected web interface. Successful...
Ubuntu 25.10 : Linux kernel (GCP) vulnerabilities (USN-8030-1)
The remote Ubuntu 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8030-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the...
USN-8033-3 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
USN-8033-2 linux-intel-iot-realtime, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
USN-8033-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
USN-8030-1 linux-gcp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
CVE-2026-25947
Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocatio...
PT-2026-20458
Name of the Vulnerable Software and Affected Versions Schneider Electric SCADAPack 47xi, SCADAPack 47x and SCADAPack 57x affected versions not specified Description A flaw exists in the firmware of Schneider Electric industrial controllers. This issue involves insufficient validation of unusual o...
P5 FNIP-8x16A and P5 FNIP-4xSH have cross-site scripting vulnerabilities
The P5 FNIP-8x16A and P5 FNIP-4xSH are Ethernet relay controllers produced by the British company P5. Both versions of P5 FNIP-8x16A and P5 FNIP-4xSH, as well as the 1.0.11 version, have a cross-site scripting vulnerability. This vulnerability arises from improper cleaning of multiple GET/POST...
Trojan Attacks on Neural Network Controllers for Robotic Systems
Neural network controllers are increasingly deployed in robotic systems for tasks such as trajectory tracking and pose stabilization. However, their reliance on potentially untrusted training pipelines or supply chains introduces significant security vulnerabilities. This paper investigates...
Omada Controllers Unauthorized Access
The vulnerability of the software for Omada Controllers, which manage corporate networks, is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
Rockwell Automation ArmorStart LT Uncontrolled Resource Consumption DoS
The vulnerability of the microprogramming software in Rockwell Automation’s ArmorStart LT distributed controllers is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...