Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tomcat (UTSA-2025-991027)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991027 advisory. Improper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred including exceeding limits during the processing of a multipart upload,...

CVE-2025-66305 Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service DoS vulnerability was identified in the "Languages" submenu of the Grav admin configuration panel /admin/config/system. Specifically, the Supported parameter fails to properly validate user input. If a malformed value ...

CVE-2025-66303 Grav is vulnerable to a DOS on the admin panel

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service DoS vulnerability has been identified in Grav related to the handling of scheduledat parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduledat...

CVE-2025-55221

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This...

CVE-2025-54848

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted series of network requests can lead to a denial of service. An attacker can send a sequence of unauthenticated packets to trigger this...

CVE-2025-54849

CVE-2025-54849 affects Socomec DIRIS Digiware M-70 gateway (firmware 1.6.9). A DoS exists in Modbus TCP and Modbus RTU over TCP due to unauthenticated access that can be triggered by a crafted Modbus TCP Write Single Register (code 6) message to port 502, writing value 1 to register 4352, which c...

CVE-2025-54848

CVE-2025-54848 affects Socomec DIRIS Digiware M-70 1.6.9, where Modbus TCP/Modbus RTU over TCP can be abused by unauthenticated Modbus TCP messages to trigger a denial-of-service. TALOS details a specific sequence of Write Single Register (code 6) messages on port 502 that changes the gateway Mod...

EUVD-2025-200035

A denial of service vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability.This...

CVE-2025-55221

Affected product: Socomec DIRIS Digiware M-70 (version 1.6.9). Vulnerability: DoS in Modbus TCP and Modbus RTU over TCP USB Function; unauthenticated packets can cause device to become unresponsive. TALOS describes exploitation via Modbus Write Single Register (code 6) to register 57872, where th...

Socomec DIRIS Digiware M-70 安全漏洞

The Socomec DIRIS Digiware M-70 is a multipoint temperature measurement module from Socomec France. A security vulnerability exists in Socomec DIRIS Digiware M-70 version 1.6.9, which originates from a denial-of-service vulnerability in the Modbus TCP function, which could lead to service...

PT-2025-48480

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur due to specially crafted network requests targeting the Modbus TCP and Modbus RTU over TCP functionality. An attacker can trigger this by sending...

Linux Distros Unpatched Vulnerability : CVE-2025-9624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versio...

Socomec DIRIS Digiware M-70 访问控制错误漏洞

The Socomec DIRIS Digiware M-70 is a communication gateway device that serves as an access point for the DIRIS Digiware system, which combines 24VDC power and communication functions in a single unit. A denial of service vulnerability exists in the Socomec DIRIS Digiware M-70 that stems from the...

[SECURITY] [DLA 4365-2] unbound security update

Debian LTS Advisory DLA-4365-2 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin November 30, 2025 https://wiki.debian.org/LTS Package : unbound Version : 1.13.1-1+deb11u7 CVE ID : CVE-2025-11411 Debian Bug : 1121446 Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan...

redis:7 security update

An update is available for module.redis, redis. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Redis is an advanced key-value store. It is often referred to as ...

RLSA-2025:19345 Important: redis:7 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

OESA-2025-2735 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2736 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

CVE-2025-58316

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability...

RLSA-2025:21140 Important: idm:DL1 security update

Rocky Enterprise Software Foundation Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: python-kdcproxy: Unauthenticated SSRF via Realm?Controlled DNS SRV...