8985 matches found
PT-2025-43923
Name of the Vulnerable Software and Affected Versions versions prior to 2025-10-27 Description An attacker obtaining SSH access to an unprivileged account may disrupt services, including SSH, leading to persistent unavailability. The issue involves a denial-of-service condition caused by resource...
The vulnerabilities of the x86/coco components of the Linux operating system’s kernel, which allow a hacker to cause a service failure
The vulnerability of the x86/coco components of the Linux operating system’s kernel is related to insufficient checking of input data in the setuparch and ccmkdec functions. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the software platform’s JSON file processing mechanism, based on Git, allows a violator to trigger a service failure. This vulnerability enables a violator to cause a service failure.
The vulnerability of the software platform’s JSON file processing mechanism, based on Git, for collaborative code development in GitLab CE/EE, is related to unlimited resource distribution. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially...
Revive Adserver: Improper sanitisation of input in the settings could cause DoS
A vulnerability was found in the settings functionality of the application where attacker-controlled values in the emailfromName and emailfromCompany fields were persisted and later rendered to pages without proper output encoding. This could have led to the execution of arbitrary JavaScript in t...
The vulnerability of the get_l2len_protocol() function in the tcprewrite tool for editing and replaying PCAP files allows a hacker to cause a service failure.
The vulnerability of the getl2lenprotocol function in the tcprewrite tool for editing and replaying PCAP files involves the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-55067 Integer Overflow or Wraparound in Veeder-Root TLS4B Automatic Tank Gauge System
The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover. When the system clock reaches January 19, 2038, it resets to December 13, 1901, causing authentication failures and disrupting core system functionalities such as login access, history...
CVE-2025-23332
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service...
The vulnerability of the formSetDeviceName() function in the Tenda AC23 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formSetDeviceName function in the Tenda AC23 router’s microprogramming software is related to writing beyond the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service...
The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.
The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...
The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.
The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...
The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the password parameter for the goform/fastsettingpppoeset endpoint. Exploiting this vulnerability allows a malicious...
The vulnerability of the wl.bcm11ac configuration of the Tenda AC18 microprogrammable router software allows a hacker to induce a service failure.
The vulnerability of the wl.bcm11ac configuration of the Tenda AC18 microprogrammable router software is related to the execution of an operation outside the buffer boundaries when processing the wifichkHz parameter for the destination node /goform/WifiMacFilterSet. Exploiting this vulnerability...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system index node linking to a directory hierarchy, which could lead to further file system corruption and...
The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the ddnsEn parameter for the /goform/SetDDNSCfg endpoint. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices lies in the fact that the operation exceeds the buffer boundaries in memory when processing the newVersion parameter at the end of the goform/setNotUpgrade process. Exploiting this vulnerability allows...
Oxford Nanopore Technologies MinKNOW
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disrupt sequencing operations and processes, exfiltrate and manipulate data, and bypass authentication controls. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk...
The vulnerability of the server software HAProxy, related to its algorithmic complexity, allows attackers to cause service interruptions.
The vulnerability of the server software HAProxy is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...
Major AWS Outage Now Mitigated: Global Impact and What Happened
A global AWS outage disrupted major apps and services across regions before being fully mitigated, exposing heavy dependence on cloud infrastructure...
What the Huge AWS Outage Reveals About the Internet
Amazon Web Services experienced DNS resolution issues on Monday morning, taking down wide swaths of the web—and highlighting a long-standing weakness in the internet's infrastructure...
JLSEC-2025-124 An issue was discovered in `decode_frame` in `libavcodec/tiff.c` in FFmpeg version 4.3, allows...
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...