9376 matches found
Linux kernel shmem DoS
The vulnerability of the shmem component in the Linux operating system’s kernel involves unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
TOTOLINK A3300R cgi-bin/cstecgi.cgi setLanguageCfg DoS
The vulnerability of the setLanguageCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service...
TOTOLINK A3300R cgi-bin/cstecgi.cgi setSyslogCfg DoS
The vulnerability of the setSyslogCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service...
Tenda CH22 Router Code Execution
The vulnerability of the fromDhcpListClient function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the kmallocarray function in the Linux operating system’s kernel component is related to the lack of memory release after the effective lifespan of the memory allocation. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda O3 SetValue GetValue DoS
The vulnerability of the SetValue and GetValue functions in the Tenda O3 wireless access point software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the dmzIP parameter at the setDmzInfo endpoint. Exploiting this vulnerability could allow an attacker...
Linux tcp_ao_copy_all_matching() DoS
The vulnerability of the tcpaocopyallmatching function in the Linux operating system is related to improper memory release after the effective lifespan has ended. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux drm_edid_raw DoS
The vulnerability of the drmedidraw function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
TOTOLINK A3300R cgi-bin/cstecgi.cgi setDdnsCfg() DoS
The vulnerability of the setDdnsCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service...
fgraph Component Kernel DoS
The vulnerability of the fgraph component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Linux DoS
The vulnerability of the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause service failures...
TOTOLINK A3300R Router DoS
The vulnerability of the setOpModeCfg function in TOTOLINK A3300R router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...
Tenda O3 SetValue Function Code Execution
The vulnerability of the SetValue and GetValue functions /goform/setDhcpConfig of the Tenda O3 wireless access point software lies in the fact that the operation goes beyond the buffer in memory when processing the macList parameter. Exploiting this vulnerability could allow a malicious actor to...
CVE-2025-34133
Wimi Teamwork versions prior to 7.38.17 contains a cross-site request forgery CSRF vulnerability in its API. The API accepts any authenticated request that contains a JSON field named 'csrftoken' without validating the field’s value; only the presence of the field is checked. An attacker can craf...
CVE-2025-34133
Wimi Teamwork
CVE-2025-41067 Reachable Assertion vulnerability in Open5GS
Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. An SBI request that deletes the NRF's own registry causes a check that ends up crashing the NRF process and renders the discovery service unavailable...
CVE-2025-59459
An attacker that gains SSH access to an unprivileged account may be able to disrupt services including SSH, causing persistent loss of availability...
CVE-2025-59459
An attacker that gains SSH access to an unprivileged account may be able to disrupt services including SSH, causing persistent loss of availability...
