The vulnerability of the ShutdownSetAdd() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ShutdownSetAdd function in Tenda AC10 router microprogramming software is related to the operation of writing data outside the buffer in memory when processing the length parameter “time”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

The vulnerability of the ReadJXLImage() function in the GraphicsMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadJXLImage function in the GraphicsMagick graphics editor is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the R7WebsSecurityHandler function in the microprogramming software for Tenda AC10 routers allows a hacker to induce a service failure.

The vulnerability of function R7WebsSecurityHandler in the Tenda AC10 router software is related to the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

CVE-2025-0676

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the SoupWebsocketConnection accepting a large WebSocket message, which may cause memory allocation issues leading to system unavailability. An attacker can disrupt service by...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

The vulnerability of the iommu_report_device_fault() function in the Linux kernel’s IOMMU support driver allows a attacker to trigger a service failure.

The vulnerability of the iommureportdevicefault function in the Linux kernel’s IOMMU support driver is related to deficiencies in exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Layer 2 Address Learning Daemon (L2ALD) in Juniper Networks’ Junos OS Evolved operating systems allows a hacker to induce a service failure.

The vulnerability of the Layer 2 Address Learning Daemon L2ALD in Juniper Networks’ Junos OS Evolved operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series arises from a improper release of memory before deleting the last link (“memory leak”), allowing an attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series is related to improper memory release before deleting the last link “memory leak”. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the BmpInput::read_native_scanline() function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library allows a hacker to cause a service failure.

The vulnerability of the BmpInput::readnativescanline function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nvme_stop_ctrl() function in the Linux kernel driver for NVME support allows a attacker to cause a service failure.

The vulnerability of the nvmestopctrl function in the Linux kernel driver for NVME storage devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-0676 Commend Injection Leading to Privilege Escalation

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

CVE-2025-0676

CVE-2025-0676 : Command injection in tcpdump within Moxa products due to improper input validation. An authenticated attacker with console access can inject and execute system commands, potentially escalating to root and maintaining persistent control, which could disrupt network services and aff...

PT-2025-14466 · Moxa · Tcpdump

Name of the Vulnerable Software and Affected Versions: Moxa products affected versions not specified Description: This issue involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execut...

Vulnerability of the path_init() function in the drivers/interconnect/core.c module – The Linux kernel interconnect driver allows a hacker to gain access to protected information or cause service failures.

Vulnerability of the pathinit function in the drivers/interconnect/core.c module – The Linux kernel interconnect driver has vulnerabilities in its code. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the sqlgvec_upd component in the Virtuoso-OpenSource web application development platform allows a attacker to cause a service failure.

The vulnerability of the sqlgvecupd component in the Virtuoso-OpenSource web application development platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of the sqlexp component in the Virtuoso-OpenSource web application development platform allows a hacker to trigger a service failure.

The vulnerability of the sqlexp component in the virtuoso-opensource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending specially crafted SQL...

The vulnerability of the qi_inst_state_free component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the qiinststatefree component in the Virtuoso-OpenSource web application development platform is related to improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially...

The vulnerability of the dfe_inx_op_col_def_table component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the dfeinxopcoldeftable component in the Virtuoso-OpenSource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...