3943 matches found
CVE-2025-20136
CVE-2025-20136 affects Cisco Secure Firewall ASA/FTD DNS inspection when NAT44/NAT64/NAT46 is configured. An unauthenticated attacker can trigger an infinite loop by sending crafted DNS packets that match a static NAT rule with DNS inspection enabled, causing the device to reload and resulting in...
PT-2025-33333 · Cisco · Cisco Secure Firewall Threat Defense (Ftd) +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software affected versions not specified Description: A flaw exists in the Internet Key Exchange Version 2 IKEv2 module that may allow a...
PT-2025-33331 · Cisco · Cisco Secure Firewall Threat Defense (Ftd) +1
Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software affected versions not specified Description: A vulnerability exists in the Internet Key Exchange Version 2 IKEv2 module that could...
GHSA-93JV-PVG8-HF3V Ollama allows deletion of arbitrary files
An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...
Ollama 安全漏洞
Ollama is a large language model that can be started and run locally from the Ollama open source. A security vulnerability exists in Ollama version v0.1.33, which stems from specially crafted packets that can lead to arbitrary file deletion...
The vulnerability of the stack for implementing Profinet RT-Labs P-Net devices lies in the lack of verification of input data during cyclic operations, which allows a malicious actor to trigger a service failure.
The vulnerability of the stack for implementing Profinet RT-Labs P-Net devices is related to the lack of verification of input data for cyclic operations. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted RPC packet...
Cisco NX-OS Buffer Access with Incorrect Length Value (CVE-2024-20294)
A vulnerability in the Link Layer Discovery Protocol LLDP feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper handling of specific fields i...
The vulnerability of the recvSlaveUpgstatus() function in the MQTT service of the TOTOLink T6 microprogramming system allows a attacker to execute arbitrary code.
The vulnerability of the recvSlaveUpgstatus function in the MQTT service of the TOTOLink T6 mesh-system’s micro-programming system is related to the issue of operations going out of the buffer in memory when processing the parameter s. Exploiting this vulnerability allows a malicious actor to...
CVE-2025-36520
A null pointer dereference vulnerability exists in the netconnectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability...
PT-2026-7968
Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could lead to the termination of the Vnet/IP software stack process if the affected product receives specially crafted...
PT-2026-7966
Name of the Vulnerable Software and Affected Versions Vnet/IP Interface Package versions R1.07.00 and earlier Description A flaw exists in the Vnet/IP Interface Package that could cause the Vnet/IP software stack process to terminate when receiving specially crafted network packets. Recommendatio...
The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to an uncontrolled and unauthorized access. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...
The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to an uncontrolled and unauthorized access. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...
The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to an uncontrolled and unauthorized access. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted packets...
The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to a countable loss of significance. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...
The vulnerability of the Vnet/IP SCADA system’s interface of Yokogawa CENTUM VP allows a intruder to trigger a service failure.
The vulnerability of the Vnet/IP SCADA system of Yokogawa CENTUM VP is related to the incorrect processing of parameter length discrepancies. Exploiting this vulnerability allows a malicious actor to trigger a service failure by sending specially crafted packets...
SUSE CVE-2025-24294
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
AZL-65202 CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3
The attack vector is a potential Denial of Service DoS. The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses suc...
ROS-20250710-08
A vulnerability in the OpenWire command handler of the Apache ActiveMQ software platform is related to a lack of control over user input. control over user input. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sending specially crafted...
The vulnerability of the DHCP Daemon (jdhcpd) on Juniper Networks Junos OS allows a attacker to cause a service failure.
The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS stems from operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending specially crafted DHCP packets...