Denial of Service (DoS)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Denial of Service DoS via improper handling of the scheduledat parameter. An attacker can cause the admin panel to become non-functional by...

CVE-2025-3012

In dpc modem, there is a possible system crash due to null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed...

Linksys E1200 Router Code Execution

The vulnerability of the getmacfromip and getipfrommac functions in Linksys E1200 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...

Linksys E1200 Router Code Execution

The vulnerability of the validateStaticRoute function in Linksys E1200 router software lies in the potential for buffer overflows in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service interruptions...

SROOT Component Unauthorized Access

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems is related to improper behavior. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

Tenda AX3 Wi-Fi Router DoS

The vulnerability of the fromSetWifiGusetBasic function in Tenda AX3 Wi-Fi routers is related to buffer overflows in the stack when processing the shareSpeed parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Tenda AX1803 DoS

The vulnerability of the SetSysTimeCfg function in the Tenda AX1803 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

SROOT Component Code Execution

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, replace data, cause system...

Grub2 Buffer Overflow DoS

The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause a service failure...

Zenitel TCIV-3+ IP video door phones Buffer Overflow DoS

The vulnerability of the microprogrammed software of the Zenitel TCIV-3+ IP video door phones is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

NVIDIA Project G-Assist Privilege Escalation

The vulnerability of the NVIDIA Project G-Assist AI-based optimization tool is related to incorrect default settings. Exploiting this vulnerability can allow attackers to enhance their privileges within the system, gain access to sensitive data, or cause service interruptions...

D-Link DIR-822K Embedded Web Server Code Execution

The vulnerability of the sub4151FC and sub41491C functions in the embedded web server of D-Link’s DIR-822K and DWR-M920 router microprogramming systems is related to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability...

Tenda AC21 Router httpd-demon SetIpMacBind Command Execution DoS

The vulnerability of the httpd-demon /goform/SetIpMacBind of the Tenda AC21 router’s microprogramming software is related to the operation that goes beyond the buffer in memory when processing the list parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

LLM Library Completions API Code Execution

The vulnerability of the Completions API component in the vLLM language model processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

Oracle Identity Manager REST WebServices DoS

The vulnerability of the REST WebServices component of the Oracle Identity Manager identity management software from Oracle Fusion Middleware is related to the lack of authentication checks for a critical function. Exploiting this vulnerability could allow an attacker to cause service failures...

SUSE CVE-2025-23259

NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver PMD, where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface...

SquashFS Heap Buffer Overflow DoS

The vulnerability of the squashfsread inode function in the SquashFS file system of Linux operating systems is related to the comparison of numerical ranges without any minimum checks. Exploiting this vulnerability could allow a attacker to cause a service failure...

Linux nft_objref Heap Buffer Overflow DoS

The vulnerability in the net/netfilter/nftobjref.c module of the Linux operating system is related to an uncontrolled recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

Oracle Linux 8 : cups (ELSA-2025-22063)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-22063 advisory. 1:2.2.6-64 - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ippreadio Leading to Remote DoS Tenable has extracted the preceding description...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unknown fields that aren't checked. An attacker can disrupt consensus and cause all block proposals to be rejected by submitting specially crafted vote extensions with...