The vulnerability of the fromSetWifiGusetBasic() function in Tenda AX3 Wi-Fi routers allows a hacker to trigger a service failure.

The vulnerability of the fromSetWifiGusetBasic function in Tenda AX3 Wi-Fi routers is related to buffer overflows in the stack when processing the shareSpeed parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the validate_static_route() function in Linksys E1200 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the validateStaticRoute function in Linksys E1200 router software lies in the potential for buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a intruder to gain unauthorized access to protected information or cause service failures.

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems is related to improper behavior. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark artificial intelligence systems allows attackers to execute arbitrary code, replace data, cause system failures, gain unauthorized access to protected information, or increase their privileges.

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, replace data, cause system...

The vulnerability of Grub2 operating system loaders, related to incorrect buffer size calculations when processing received packets, allows attackers to cause service failures.

The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the httpd-demon (/goform/SetIpMacBind) of the Tenda AC21 router software allows a attacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerabilities of the sub_4151FC() and sub_41491C() functions in the embedded web server software of D-Link’s DIR-822K and DWR-M920 routers allow attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the sub4151FC and sub41491C functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones lies in the fact that the operation values can escape beyond the buffer in memory, allowing a intruder to cause a service failure.

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the NVIDIA Project G-Assist, a AI-based optimization tool, allows a user to enhance their privileges within the system, gain access to protected data, or trigger a service failure.

The vulnerability of the NVIDIA Project G-Assist AI-based optimization tool is related to incorrect default settings. Exploiting this vulnerability can allow attackers to enhance their privileges within the system, gain access to sensitive data, or cause service interruptions...

The vulnerability of the REST WebServices component of the Oracle Identity Manager identity management system, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the REST WebServices component of the Oracle Identity Manager identity management software from Oracle Fusion Middleware is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Completions API component in the LLM library vLLM allows a attacker to trigger a service failure and execute arbitrary code.

The vulnerability of the Completions API component in the vLLM language model processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

SUSE CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

The vulnerability in the module net/netfilter/nft_objref.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/netfilter/nftobjref.c module of the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the squashfs_read inode() function in the SquashFS file system of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the squashfsread inode function in the SquashFS file system of the Linux operating system is related to the comparison of numerical ranges without any minimum checks. Exploiting this vulnerability could allow a attacker to cause a service failure...

Oracle Linux 8 : cups (ELSA-2025-22063)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-22063 advisory. 1:2.2.6-64 - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS Tenable has extracted the preceding description...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unknown fields that aren't checked. An attacker can disrupt consensus and cause all block proposals to be rejected by submitting specially crafted vote extensions with...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the NudmSubscriberDataManagement API. An attacker can disrupt service availability by sending crafted requests to this API endpoint. Remediation Upgrade...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions via the NpcfBDTPolicyControl API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Remediation Upgrade...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions via the NpcfBDTPolicyControl API when processing crafted POST requests. An attacker can disrupt service availability by sending specially crafted requests. Remediation Upgrade...

The vulnerability of the Audio/Video components in Mozilla Firefox and Firefox ESR browsers allows a hacker to trigger a service failure.

The vulnerability of the Audio/Video components in Mozilla Firefox and Firefox ESR lies in the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...