9378 matches found
CVE-2025-23332
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference. A successful exploit of this vulnerability might lead to denial of service...
Tenda AC23 Router Form Set Device Name Code Execution
The vulnerability of the formSetDeviceName function in the Tenda AC23 router’s microprogramming software is related to writing beyond the buffer boundaries in memory when processing the devName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service...
Mobility Management Element DoS
The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...
Mobility Management Element DoS
The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...
Tenda AC15 SetValue Function Code Execution
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the ddnsEn parameter for the /goform/SetDDNSCfg endpoint. Exploiting this vulnerability allows a remote attacker to...
Tenda AC15 SetValue Function Code Execution
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices lies in the fact that the operation exceeds the buffer boundaries in memory when processing the newVersion parameter at the end of the goform/setNotUpgrade process. Exploiting this vulnerability allows...
Tenda AC18 DoS
The vulnerability of the wl.bcm11ac configuration of the Tenda AC18 microprogrammable router software is related to the execution of an operation outside the buffer boundaries when processing the wifichkHz parameter for the destination node /goform/WifiMacFilterSet. Exploiting this vulnerability...
Tenda AC15 SetValue Function Code Execution
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the password parameter for the goform/fastsettingpppoeset endpoint. Exploiting this vulnerability allows a malicious...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system index node linking to a directory hierarchy, which could lead to further file system corruption and...
Oxford Nanopore Technologies MinKNOW
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disrupt sequencing operations and processes, exfiltrate and manipulate data, and bypass authentication controls. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk...
HAProxy Algorithmic Complexity DoS
The vulnerability of the server software HAProxy is related to its algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...
Major AWS Outage Now Mitigated: Global Impact and What Happened
A global AWS outage disrupted major apps and services across regions before being fully mitigated, exposing heavy dependence on cloud infrastructure...
What the Huge AWS Outage Reveals About the Internet
Amazon Web Services experienced DNS resolution issues on Monday morning, taking down wide swaths of the web—and highlighting a long-standing weakness in the internet's infrastructure...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the dasherprocess function in the MP4Box multimedia platform of GPAC is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the StatSFVec2f function in the MP4Box utility of the GPAC multimedia platform is related to the pointer swapping between the zero pointer and other pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
JLSEC-2025-124 An issue was discovered in `decode_frame` in `libavcodec/tiff.c` in FFmpeg version 4.3, allows...
An issue was discovered in decodeframe in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service DoS...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS via the processing of malicious JSON payloads in the request handling process. An attacker can exhaust system memory and CPU resources by sending specially crafted JSON objects that, when deserialized, consume...
FreeScout Support Service Management System Meilisearch Disclosure DoS
The vulnerability of the /app-settings/meilisearch component of the Faster Search module in the FreeScout support service management system is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...
Easy Digital Downloads Disclosure DoS
The vulnerability of the Easy Digital Downloads module in the FreeScout support management system is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to disclose protected information and cause service failures...
CVE-2025-61581 Apache Traffic Control: ReDoS issue in Traffic Router configuration
UNSUPPORTED WHEN ASSIGNED Inefficient Regular Expression Complexity vulnerability in Apache Traffic Control. This issue affects Apache Traffic Control: all versions. People with access to the management interface of the Traffic Router component could specify malicious patterns and cause...