31761 matches found
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46725)
drm/amdgpu: vulnerability caused by an out-of-bounds write warning due to an unchecked ring type value. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42101)
drm/nouveau: null pointer dereference in nouveauconnectorgetmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504627; scriptversion"1.3";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46719)
usb: typec: ucsi: Fix null pointer dereference in trace ucsiregisteraltmode checks ISERR for the alt pointer and treats NULL as valid. When CONFIGTYPECDPALTMODE is not enabled, ucsiregisterdisplayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-38586)
r8169: possible ring buffer corruption on fragmented Tx packets. Vulnerability on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring buffer, subsequently leading to calls to dmaunmapsingle with a null address. This was caused by...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53183)
um: net: The drvdata is not available in release. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504558; scriptversion"1.2";...
CVE-2025-36461
Dell ControlVault3 and Dell ControlVault3 Plus are affected by multiple out-of-bounds read/write vulnerabilities in the ControlVault WBDI Driver Broadcom Storage Adapter. A crafted WinBioControlUnit call, using ControlCode WBIO_USH_GET_TEMPLATE (and related codes), can trigger memory corruption o...
CVE-2025-63292
Freebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...
CVE-2025-63292
Freebox v5 HD firmware = 1.7.20, Freebox v5 Crystal firmware = 1.7.20, Freebox v6 Révolution r1–r3 firmware = 4.7.x, Freebox Mini 4K firmware = 4.7.x, and Freebox One firmware = 4.7.x were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM...
MAL-2025-190511 Malicious code in signals-embed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d5dc4270646b6f83ba4c0f5f334ec8a5cedd7b16888c9b51a7b3159ddd32ce The package signals-embed was found to contain malicious code. Source: ghsa-malware 9a80ff00c3aa6ab32518f57107ea588aa2da22e76d6db9823783032b89ca146f...
MAL-2025-190510 Malicious code in react-native-animated-shine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5050403e37c46819e95b4473ce0825d3dfe40bf8b41941ecd666e9b5048ffb14 The package react-native-animated-shine was found to contain malicious code. Source: ghsa-malware...
Malicious code in react-confetti-modern (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a195b8307abbf7a2b6a5d4bd82b65aaad0891e87788e11d1a934707180631c The package react-confetti-modern was found to contain malicious code. Source: ghsa-malware...
CVE-2025-63292
CVE-2025-63292 affects Freebox v5 HD (firmware 1.7.20), Freebox v5 Crystal (1.7.20), Freebox v6 Révolution r1–r3 (4.7.x), Freebox Mini 4K (4.7.x), and Freebox One (4.7.x). The root issue is that during the initial phase of EAP-SIM over the FreeWifi_secure network, the subscriber’s full NAI (embed...
PT-2025-47230
Name of the Vulnerable Software and Affected Versions D-Link DWR-M920 version 1.1.5 D-Link DWR-M921 version 1.1.5 D-Link DIR-822K version 1.1.5 D-Link DIR-825M version 1.1.5 Description A security issue exists in D-Link devices that allows for command injection. The system function within the...
D-Link多款产品 安全漏洞
D-Link DWR-M920 and others are a router from China-based AUO D-Link. A security vulnerability exists in various D-Link products, which stems from incorrect manipulation of the parameter host in the file /boafrm/formTracerouteDiagnosticRun, which may result in a buffer overflow. The following...
PT-2025-47193
Name of the Vulnerable Software and Affected Versions Freebox v5 HD version 1.7.20 Freebox v5 Crystal version 1.7.20 Freebox v6 Révolution r1–r3 versions 4.7.x Freebox Mini 4K versions 4.7.x Freebox One versions 4.7.x Description Freebox devices expose subscribers' IMSI identifiers in plaintext...
CVE-2025-13191
A vulnerability was determined in D-Link DIR-816L 206b09beta. This issue affects the function soapcgimain of the file /soap.cgi. This manipulation causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This...
EUVD-2025-197687
A vulnerability has been found in D-Link DIR-816L 206b09beta. This affects the function genacgimain of the file gena.cgi. The manipulation of the argument SERVERID/HTTPSID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to th...
net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY
...
EUVD-2021-34718
PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication. A remote, unauthenticated attacker can directly retrieve a compressed configuration backup file from the device. The backup contains sensitive configuration information,...