32962 matches found
UBUNTU-CVE-2025-47914
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
When the Internet Fails Again, Will You Survive a DDoS Attack?
...
CVE-2025-56643
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a toke...
authentik 安全漏洞
authentik is an open source identity provisioning application from authentik Open Source. A security vulnerability exists in authentik versions prior to 2025.8.5 and prior to 2025.10.2, which stems from a service account that can still be authenticated after deactivation, potentially leading to...
CVE-2025-63220
The CVE-2025-63220 entry concerns Sound4 FIRST's web-based management interface. The vulnerability is Remote Code Execution (RCE) via a malicious firmware update package, caused by the update mechanism failing to validate the integrity of the manual.sh script. An attacker could modify this script...
CVE-2025-56643
Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a toke...
CVE-2025-55179
WhatsApp family apps (iOS and Mac) are affected by incomplete validation of rich response messages that could allow processing of media content from an arbitrary URL on another user’s device. Affected versions: iOS WhatsApp pre-2.25.23.73, iOS WhatsApp Business pre-2.25.23.82, and Mac WhatsApp pr...
kernel: firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
In the Linux kernel, the following vulnerability has been resolved: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails When scpi probe fails, at any point, we need to ensure that the scpiinfo is not set and will remain NULL until the probe succeeds. If it is not taken care, the...
The vulnerability of the ChemKinFormat::CheckSpecies function in the Open Babel file format conversion software allows a hacker to cause a service failure.
The vulnerability of the ChemKinFormat::CheckSpecies function in the Open Babel file format conversion software is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the GAMESSOutputFormat::ReadMolecule function in the software for converting chemical substance file formats, Open Babel, allows a hacker to cause a service failure.
The vulnerability of the GAMESSOutputFormat::ReadMolecule function in the chemical substance format conversion software Open Babel is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the SubRip subtitle parser. Exploiting this vulnerability can allow an attacker to cause a service failure...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56603)
net: afcan: do not leave a dangling sk pointer in cancreate. On error cancreate frees the allocated sk object, but sockinitdata has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock object and may cause use-after-free later. This plugin only works...
PT-2026-2514
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's SCSI target functionality. Specifically, if memory allocation for cmd-t task cdb fails, the pointer remains NULL and is subsequently dereferenced,...
HPE Aruba Networking AOS-CX 安全漏洞
HPE Aruba Networking AOS-CX is a series of switch devices from HPE America. A security vulnerability exists in the HPE Aruba Networking AOS-CX that stems from a platform-level denial-of-service vulnerability that could cause the switch to fail to boot...
The vulnerability of the CacaoFormat::SetHilderbrandt function in software for converting chemical substance file formats, such as Open Babel, allows a hacker to cause a service failure.
The vulnerability of the CacaoFormat::SetHilderbrandt function in software for converting chemical substance file formats in Open Babel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the subtitle parser TMPlayer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42077)
ocfs2: DIO failure due to insufficient transaction credits. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504618; scriptversion"1.3";...
The vulnerability in the Rack::Multipart::Parser class of the module interface between web servers and Rack web applications allows a attacker to cause a service failure.
The vulnerability of the Rack::Multipart::Parser class in module interfaces between web servers and Rack web applications involves an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the QEMU hardware emulation software, related to resource management operations after the expiration of their lifespan, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to operations involving resources after their expiration. Exploiting this vulnerability can allow an attacker to trigger a service failure...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49957)
ocfs2: null-ptr-deref when journal load failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504593; scriptversion"1.2";...