Lucene search
+L

9310 matches found

BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•17 views

The vulnerability of the nbd_genl_connect() function in the nbd component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the nbdgenlconnect function in the nbd component of the Linux operating system’s kernel lies in its ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.7AI score0.0016EPSS
SaveExploits0References19Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•16 views

The vulnerability of the __clk_register() function in the clk component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the clkregister function in the clk component of the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS7.2AI score0.00159EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•15 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to reading beyond the buffer in memory, allowing a hacker to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PRT file...

7.8CVSS7.8AI score0.00162EPSS
SaveExploits0References3Affected Software14
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•15 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to buffer overflow in the stack, allows a attacker to cause service interruptions.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted requests...

6.8CVSS5.8AI score0.00302EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•18 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server lies in the fact that resources are not released after their useful period has ended. This allows attackers to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability allows a malicious actor to cause service interruptions by...

6.8CVSS5.5AI score0.00298EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/07/30 12:00 a.m.•16 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created PR...

7.8CVSS8AI score0.00162EPSS
SaveExploits0References3Affected Software14
OSV
OSV
•added 2025/07/29 10:15 p.m.•15 views

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

9.8CVSS5.8AI score0.00914EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/29 10:15 p.m.•25 views

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

9.8CVSS0.00914EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/29 9:11 p.m.•25 views

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

0.00914EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/29 9:11 p.m.•55 views

CVE-2025-40600

The SonicOS operating system is vulnerable to a Use of Externally-Controlled Format String vulnerability within its SSL VPN interface . A remote, unauthenticated attacker can exploit this flaw to cause a service disruption or service failure . SonicWall has released a new version to address this ...

9.8CVSS7.3AI score0.00914EPSS
SaveIn wildExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/29 9:11 p.m.•6 views

CVE-2025-40600

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

7.3AI score0.00914EPSS
SaveExploits0References1
SonicWall
SonicWall
•added 2025/07/29 3:46 p.m.•32 views

SonicOS Use of Externally-Controlled Format String Vulnerability

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption.SonicWall strongly advises users of the SonicWall firewall products to upgrade to the mentioned fixed release version to address this...

5.9CVSS6.3AI score0.00914EPSS
SaveExploits0
HackRead
HackRead
•added 2025/07/29 10:41 a.m.•16 views

How Scattered Spider Used Fake Calls to Breach Clorox via Cognizant

Specops Software's analysis reveals how Scattered Spider's persistent help desk exploitation cost Clorox $400 million. Understand the August 2023 breach, its operational disruption, and critical steps organisations must take to protect against similar social engineering threats...

7.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/29 12:00 a.m.•3 views

CVE-2025-40600: Use of Externally-Controlled Format String

Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...

9.8CVSS6AI score0.00914EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/29 12:00 a.m.•35 views

PT-2025-31264 · Sonicwall · Sonicos

Name of the Vulnerable Software and Affected Versions: SonicWall versions prior to 7.3.0-7012 Description: A format string vulnerability exists in the SonicOS SSL VPN interface, allowing a remote, unauthenticated attacker to cause a denial-of-service DoS condition. The vulnerability is due to the...

9.8CVSS5.7AI score0.00914EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•14 views

The vulnerability of the __xa_store() and __xa_erase() functions in the drivers/infiniband/hw/mlx5/odp.c module of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the xastore and xaerase functions in the drivers/infiniband/hw/mlx5/odp.c module of Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

7CVSS5.9AI score0.00164EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•19 views

The vulnerability of the jingx_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the jingxasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

9CVSS7.5AI score0.01213EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•22 views

The vulnerability of the arp_sys_asp() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the arpsysasp function in D-Link DI-8100 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending a specially crafted HTTP request...

9CVSS7.5AI score0.01213EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•18 views

The vulnerability of the formSetWifiMacFilterCfg function (/goform/setWifiFilterCfg) in the Tenda AX1803 router software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSetWifiMacFilterCfg function /goform/setWifiFilterCfg in the Tenda AX1803 router’s software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute...

9CVSS8.3AI score0.00894EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•21 views

The vulnerability of the XDP_REDIRECT() function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux kernel can be exploited by attackers to cause service failures.

The vulnerability of the XDPREDIRECT function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux kernel systems is related to exception handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00344EPSS
SaveExploits0References10Affected Software4
Rows per page
Query Builder