32963 matches found
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46737)
nvmet-tcp: kernel crash if commands allocation fails. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504475; scriptversion"1.2";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49957)
ocfs2: null-ptr-deref when journal load failed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504593; scriptversion"1.2";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41068)
s390/sclp: sclpinit failure. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504592; scriptversion"1.2";...
Siemens SCALANCE and RUGGEDCOM Devices Double Free (CVE-2024-46673)
scsi: aacraid: Fix double-free on probe failure. aacprobeone calls hardware-specific init functions through the aacdriverident::init pointer, all of which eventually call down to aacinitadapter. If aacinitadapter fails after allocating memory for aacdev::queues, it frees the memory but does not...
Motex LanScope Endpoint Manager Remote Code Execution (CVE-2025-61932)
Lanscope Endpoint Manager On-Premises Client program MR and Detection agent DA improperly verifies the origin of incoming requests, allowing an attacker to execute arbitrary code by sending specially crafted packets. Note that Nessus has not tested for this issue but has instead relied only on th...
CVE-2025-63291
When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying...
kernel: of_numa: fix uninitialized memory nodes causing kernel panic
A flaw was found in the linux kernel ofnuma subsystem fails to properly initialize memory‑only NUMA nodes i.e., nodes without CPUs. When such nodes remain uninitialized, a subsequent call to freeareainit may access NODEDATA for those nodes and trigger a kernel panic due to a NULL pointer...
The vulnerability of the amdgpupci_error_detected() function in the driver/gpu/drm/amd/amdgpu/amdgpu_device.c file of the Linux operating system’s AMD GPU kernel support module allows a malicious actor to cause a service failure.
The vulnerability of the amdgpupcierrordetected function in the driver/gpu/drm/amd/amdgpu/amdgpudevice.c file of the Direct Rendering Infrastructure DRI support driver for AMD GPU cores in the Linux operating system is related to improper resource locking. Exploiting this vulnerability can allow ...
The vulnerability of the program_check_common() function in the arch/powerpc/kernel/exceptions-64s.S file of the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the programcheckcommon function in the arch/powerpc/kernel/exceptions-64s.S file of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the `ftrace_hash_ipmodify_update()` function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, allows a hacker to cause a service failure.
The vulnerability of the ftracehashipmodifyupdate function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the die_mce() function in the arch/powerpc/kernel/traps.c module, which is part of the PowerPC kernel support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the diemce function in the arch/powerpc/kernel/traps.c module of the PowerPC platform support for the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service...
The vulnerability of the a3xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a3xx_gpu.c file of the driver module allows a hacker to cause a service failure. This vulnerability exposes the driver for direct rendering infrastructure support in Linux kernels.
The vulnerability of the a3xxgpuinit function in the drivers/gpu/drm/msm/adreno/a3xxgpu.c file, a driver for supporting Direct Rendering Infrastructure DRI in Linux kernels, is related to the absence of a standardized error-handling mechanism. Exploiting this vulnerability could allow an attacker...
The vulnerability of the bio_endio() function in the block/bio.c module of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the bioendio function in the block/bio.c module of the Linux operating system’s kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...
net: lantiq_xrx200: restore buffer if memory allocation failed
...
The vulnerability of the mpi_ec_init() function in the lib/mpi/ec.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the mpiecinit function in the lib/mpi/ec.c module of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2025-40681
Cross-site Scripting XSS vulnerability reflected in xCally's Omnichannel v3.30.1. This vulnerability allowsan attacker to executed JavaScript code in the victim's browser by sending them a malicious URL using the 'failureMessage' parameter in '/login'. This vulnerability can be exploited to steal...
OESA-2025-2657 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will do spufsrmdir in case of failure. That does remove everything we...
OESA-2025-2656 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will do spufsrmdir in case of failure. That does remove everything we...
OESA-2025-2658 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufsnewfile failure It's called from spufsfilldir, and caller of that will do spufsrmdir in case of failure. That does remove everything we...