9375 matches found
CVE-2025-54863
Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could...
CVE-2025-64187
OctoPrint provides a web interface for controlling consumer 3D printers. Versions 1.11.3 and below are affected by a vulnerability that allows injection of arbitrary HTML and JavaScript into Action Command notifications and prompts popups generated by the printer. An attacker who successfully...
TOTOLINK LR350 Sub Function Buffer Overflow DoS
The vulnerability of the sub421BAC function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
TOTOLINK A7000R Router DoS
The vulnerability of sub421A04 in the microprogramming software of TOTOLINK A7000R routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the padcompressskb function in the drivers/net/ppp/pppgeneric.c module of the Linux kernel lies in the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux ax25_kiss_rcv Heap Buffer Overflow DoS
The vulnerability of the ax25kissrcv function in the ax25kissrcv module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
TOTOLINK LR350 Router DoS
The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Tenda G3 Wireless Access Point DoS
The vulnerability of the ipMacBindListStore function in the Tenda G3 wireless access point’s microprogramming software is related to buffer overflow when processing the listStr parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially crafted POST...
adreno_gpu_init Heap Buffer Overflow DoS
The vulnerability of the adrenogpuinit function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file, a part of the Linux Direct Rendering Infrastructure DRI support driver, involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
NVIDIA Triton Inference Server Buffer Overflow DoS
The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server relates to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service failures...
HMC Controller Code Execution
The vulnerability of the HMC controller on NVIDIA’s Hopper HGX and DGX computing platforms is related to deficiencies in the mechanism for assigning internal resources with appropriate access levels for debugging purposes. Exploiting this vulnerability can allow attackers to enhance their...
NVIDIA Nsight Graphics Code Execution
The vulnerability of the ngfx component of the NVIDIA Nsight Graphics debugging tool is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code, increase privileges, and cause service failures...
Exiv2 jpegBase::readMetadata() DoS
The vulnerability of the jpegBase::readMetadata function in the Exiv2 library and command-line utilities for managing image metadata involves inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Tenda AX1803 Router DoS
The vulnerability of the formfastsettingwifiset function in the Tenda AX1803 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the stateshow function in the mm/damon/sysfs.c module of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
Hackers commit highway robbery, stealing cargo and goods
There’s a modern-day train heist happening across America, and this time, some of the bandana-masked robbers are sitting behind screens. According to new research, a group of cybercriminals has been attacking trucking, freight, and logistics companies for months, impersonating brands and even...
Tenda CH22 Router Code Execution
The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda CH22 router microprogramming system is related to the issue of the operation leaving the buffer boundaries in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execu...
Tenda CH22 Router fromRouteStatic() Code Execution
The vulnerability of the fromRouteStatic function /goform/RouteStatic of the Tenda CH22 router software lies in the fact that the operation’s output goes beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure b...
Linux fs/ntfs3/index.c DoS
The vulnerability in the fs/ntfs3/index.c module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to cause a service failure...
drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c
The vulnerability of the dcn30inithw function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30hwseq.c driver module of the Direct Rendering Infrastructure DRI support driver for AMD video cards in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allo...