The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to uncontrolled memory distribution, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...

The vulnerability of the nbd_genl_connect() function in the nbd component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nbdgenlconnect function in the nbd component of the Linux operating system’s kernel lies in its ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to reading beyond the buffer in memory, allowing a hacker to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service interruptions by...

The vulnerability of the __clk_register() function in the clk component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clkregister function in the clk component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to buffer overflow in the stack, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

CVE-2025-40600

The CVE-2025-40600 affects SonicWall SonicOS SSL VPN interface, where an externally-controlled format string error allows remote, unauthenticated attackers to cause service disruption (DoS). The issue is tied to handling of format strings in SSL VPN, with a critical CVSS base score (9.8) and netw...

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

SonicOS Use of Externally-Controlled Format String Vulnerability

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.SonicWall strongly advises users of the SonicWall firewall products to upgrade to the mentioned fixed release version to address this...

How Scattered Spider Used Fake Calls to Breach Clorox via Cognizant

Specops Software's analysis reveals how Scattered Spider's persistent help desk exploitation cost Clorox $400 million. Understand the August 2023 breach, its operational disruption, and critical steps organisations must take to protect against similar social engineering threats...

PT-2025-31264 · Sonicwall · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicWall versions prior to 7.3.0-7012 Description: A format string vulnerability exists in the SonicOS SSL VPN interface, allowing a remote, unauthenticated attacker to cause a denial-of-service DoS condition. The vulnerability is due to the...

The vulnerability of the __xa_store() and __xa_erase() functions in the drivers/infiniband/hw/mlx5/odp.c module of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the xastore and xaerase functions in the drivers/infiniband/hw/mlx5/odp.c module of Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability in the driver/modules/usb/chipidea/udc.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/chipidea/udc.c module of Linux operating systems is related to incorrect operation of the USB interface. This occurs regardless of whether the USB device controller is disabled, due to improper locking of resources. Exploiting this vulnerability can allow an...

The vulnerability of the XDP_REDIRECT() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux kernel can be exploited by attackers to cause service failures.

The vulnerability of the XDPREDIRECT function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux kernel systems is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the arp_sys_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the arpsysasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

The vulnerability of the jingx_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the jingxasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

The vulnerability of the formSetWifiMacFilterCfg function (/goform/setWifiFilterCfg) in the Tenda AX1803 router software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSetWifiMacFilterCfg function /goform/setWifiFilterCfg in the Tenda AX1803 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute...