CVE-2024-48014

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

Ericsson Indoor Connect 安全漏洞

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect version 8855, which arises from improper input validation and could result in loss of integrity and confidentiality, unauthorized disclosure and modification ...

cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS

A flaw was found in the CUPS printing system’s ippreadio function, which handles Internet Printing Protocol IPP requests. When processing specially crafted printer attribute responses, improper validation can cause a null pointer dereference. This leads to a crash in libcups, potentially disrupti...

UK Arrest Made After Cyberattack Disrupts Major European Airports

UK police arrest man over cyberattack on Collins Aerospace that disrupted check-in at Heathrow, Berlin, Brussels and other airports...

PT-2025-39253

Name of the Vulnerable Software and Affected Versions NVIDIA nvJPEG affected versions not specified Description The software contains a flaw in JPEG encoding that could allow an attacker to trigger an out-of-bounds read by supplying a specially designed image. The image dimensions are crafted to...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the operation of writing beyond the buffer in memory, allowing a hacker to cause a service failure

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially created malicious PDF file...

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

The U.S. Secret Service on Tuesday said it took down a network of electronic devices located across the New York tri-state area that were used to threaten U.S. government officials and posed an imminent threat to national security. "This protective intelligence investigation led to the discovery ...

The vulnerability of the software-hardware control device for programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN lies in its failure to enforce data protection mechanisms. This allows attackers to circumvent existing security restrictions, gain unauthorized access to the device, and trigger service failures.

The vulnerability of the software-hardware solution for managing programmatically defined networks in HPE Aruba Networking EdgeConnect SD-WAN is related to a breach in data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to circumvent existing security...

CVE-2025-51005

A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. When a crafted pcap file is processed, the program incorrectly handles memory in the checksum calculation logic at dochecksummathliveplay in tcpliveplay.c, leading to a possible denial of service...

The vulnerability of the drm_crtc_handle_vblank() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmcrtchandlevblank function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability in the `net/sched/sch_prio.c` component of the Linux operating system allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the net/sched/schprio.c component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, compromise its integrity, and cause...

Examining I2P Resilience: Effect of Centrality-Based Attack

This study examines the robustness of I2P, a well-regarded anonymous and decentralized peer-to-peer network designed to ensure anonymity, confidentiality, and circumvention of censorship. Unlike its more widely researched counterpart, TOR, I2P's resilience has received less scholarly attention...

The vulnerability in the `binutils/objcopy.c` component of the GNU Binutils development environment allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability in the binutils/objcopy.c component of the GNU Binutils development environment relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise i...

The vulnerability of the ins_typebuf() function in the Vim text editor allows a hacker to gain unauthorized access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the instypebuf function in the Vim text editor is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, and even cause...

The vulnerability of the /dcmimgle/diinpxt.h component of the DICOM processing library, which allows unauthorized access by allowing buffer copying without checking the size of the input data, may lead to service interruptions for attackers.

The vulnerability in the /dcmimgle/diinpxt.h library for working with the DICOM format is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the fromPptpUserAdd() function in the Tenda FH1206 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromPptpUserAdd function in the Tenda FH1206 router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...

CVE-2025-34200: Cleartext Storage of Sensitive Information

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool arises from the lack of measures taken to neutralize specific elements. This allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, enhance their...

The vulnerability of the kasan_find_vm_area() function (mm/kasan/report.c) in the Linux operating system’s kasan component, which allows a hacker to cause a service failure

The vulnerability of the kasanfindvmarea function mm/kasan/report.c in the Linux kernel’s kasan component is related to mutual locking of execution threads. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-37124

A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leading to unauthorized access or disruptio...