7817 matches found
The vulnerability of the hci_cmd_sync_clear() function in the Linux operating system’s Bluetooth kernel implementation allows a intruder to cause a service failure.
The vulnerability of the hcicmdsyncclear function in the Linux operating system’s Bluetooth kernel implementation is related to the use of memory after it is freed due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
TencentOS Server 3: subversion (TSSA-2022:0178)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0178 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-4418
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...
CVE-2025-49081
There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with system administrator permissions can impair the availability of the Secure Access administrative UI by writing invalid data to the warehouse...
CVE-2025-49199
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...
The vulnerability of the formSetPPTPUserList() function (/goform/setPptpUserList) in the Tenda AC6 router software allows a hacker to trigger a service failure.
The vulnerability of the formSetPPTPUserList function /goform/setPptpUserList of the Tenda AC6 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the list parameter. Exploiting this vulnerability could allow an...
The vulnerability of the setSystemEmail() function in D-Link DCS-932L microprogrammed video cameras allows a intruder to execute arbitrary code or cause a service failure.
The vulnerability of the setSystemEmail function in D-Link DCS-932L microprogrammed surveillance cameras is related to the issue where the operation data is written outside of the buffer in memory when processing the EmailSMTPPortNumber parameter. Exploiting this vulnerability allows a remote...
CVE-2025-4418
An improper validation of integrity check value vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow a miscreant with elevated privileges to modify PI Connector for CygNet local data files cache and buffers in a way that causes the...
CVE-2025-30321
InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption in service. Exploitation of this issue requir...
CVE-2025-49199
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...
CVE-2025-49199 Backup files can be modified and uploaded
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...
CVE-2025-49199
CVE-2025-49199 involves unsigned backup ZIP files used by the application, allowing an attacker to download, modify, and re-upload a backup ZIP. This can disrupt the application by configuring services to prevent operation and redirect internal traffic to attacker-hosted services, potentially exp...
CVE-2025-26468
CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...
Why DNS Security Is Your First Defense Against Cyber Attacks?
In today's cybersecurity landscape, much of the focus is placed on firewalls, antivirus software, and endpoint detection. While these tools are essential, one critical layer often goes overlooked: the Domain Name System DNS. As the starting point of nearly every online interaction, DNS is not onl...
DHCP Server Service Denial of Service Vulnerability
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
Denial Of Service (DoS)
github.com/kuadrant/authorino is vulnerable to Denial Of Service DoS. The vulnerability is due to insufficient access control or privilege enforcement, allowing an attacker to disrupt or shut down the Authorino service, blocking the evaluation of all authentication policies on the cluster...
CVE-2025-26468
CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...
CVE-2025-26468
CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...
CVE-2025-26468 CyberData 011209 SIP Emergency Intercom Missing Authentication for Critical Function
CyberData 011209 Intercom exposes features that could allow an unauthenticated to gain access and cause a denial-of-service condition or system disruption...