CVE-2025-13165

CVE-2025-13165 concerns Digiwin EasyFlow GP. The vulnerability is a Denial of Service via unauthenticated remote requests that can crash or deny the web service. The initial records attribute a high impact (availability) with network access and no privileges required, but exploitation details are...

CVE-2025-13165 Digiwin｜EasyFlow GP - Denial of service

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service...

The vulnerability of the URL Parser component in the Zyxel router microprogramming software-based web server allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the URL Parser component in the Zyxel router microprogramming software web server involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code by sending...

The vulnerability of the ubifs_alloc_inode() function in the fs/ubifs/super.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ubifsallocinode function in the fs/ubifs/super.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dwc3_gadget_free_endpoints() function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver framework allows a hacker to cause a service failure.

The vulnerability of the dwc3gadgetfreeendpoints function in the drivers/usb/dwc3/gadget.c module of the Linux device support driver framework is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the i40e_clearinterruptScheme() function in the drivers/net/ethernet/intel/i40e/i40e_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a service failure.

The vulnerability of the i40eclearinterruptScheme function in the drivers/net/ethernet/intel/i40e/i40emain.c file of the Linux kernel’s Ethernet driver module involves the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a system failure...

Offensive Tool Determination Strategy R.I.D.D.L.E. + (C)

Intentional threats are a major risk factor related to vulnerabilities in critical infrastructure assets, and an accurate risk assessment is necessary to analyze threats, assess vulnerabilities, and evaluate potential impacts on assets and systems. This research proposes a methodology that can be...

The vulnerability of the nixge_hw_dma_bd_release() function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver allows a hacker to cause a service failure.

The vulnerability of the nixgehwdmabdrelease function in the drivers/net/ethernet/ni/nixge.c module of the Linux operating system’s network adapter support driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dm_mq_queue_rq() function in the drivers/md/dm-rq.c module of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the dmmqqueuerq function in the drivers/md/dm-rq.c module of the support for multiple device types RAID and LVM in the Linux kernel is related to improper resource management. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the j1939_netdev_start() function in the net/can/j1939/main.c module allows a hacker to cause a service failure for Linux kernel-based CAN bus interfaces.

The vulnerability of the j1939netdevstart function in the net/can/j1939/main.c module, which supports J1939 CAN interfaces in Linux kernels, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `create_core_data()` function in the `drivers/hwmon/coretemp.c` file of the Linux kernel allows a attacker to access protected information or cause service failures.

The vulnerability of the createcoredata function in the drivers/hwmon/coretemp.c file of the Linux kernel lies in the handling of operations that go beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the ksz_switch_remove() function in the drivers/net/dsa/microchip/ksz_common.c file of the DSA kernel support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the kszswitchRemove function in the drivers/net/dsa/microchip/kszcommon.c file of the DSA kernel support driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the in_to_reg() function in the drivers/hwmon/nct6775.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the intoreg function in the drivers/hwmon/nct6775.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the esw_inline_mode_to_devlink() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the eswinlinemodetodevlink function in the drivers/net/ethernet/mellanox/mlx5/core/eswitchoffloads.c file of the Mellanox Ethernet adapter support driver for Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an...

The vulnerability of the nilfs_dat_commit_free() function in the fs/nilfs2/dat.c module of the NILFS2 file system support for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nilfsdatcommitfree function in the fs/nilfs2/dat.c module of the NILFS2 file system support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hfi1_ipoib_txreq_init() function in the drivers/infiniband/hw/hfi1/ipoib_tx.c module of the Linux operating system’s InfiniBand driver allows a attacker to cause a service failure.

The vulnerability of the hfi1ipoibtxreqinit function in the drivers/infiniband/hw/hfi1/ipoibtx.c module of the Linux kernel’s InfiniBand support driver is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the m_canpciprobe() function in the drivers/net/can/m_can/m_canpci.c file of the Linux kernel’s CAN device support driver allows a hacker to cause a service failure.

The vulnerability of the mcanpciprobe function in the drivers/net/can/mcan/mcanpci.c file of the Linux CAN device support driver is related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Tenda AC8 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of Tenda AC8 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

CVE-2021-4467

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...

CVE-2021-4467 Positive Technologies MaxPatrol 8 & XSpider Remote DoS

Positive Technologies MaxPatrol 8 and XSpider contain a remote denial-of-service vulnerability in the client communication service on TCP port 2002. The service generates a new session identifier for each incoming connection without adequately limiting concurrent requests. An unauthenticated remo...