Important: Red Hat Security Advisory: RHODF-4.16-RHEL-9 security update

An updated images are now available for RHODF-4.16-RHEL-9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Linux Kernel Improper Input Validation (CVE-2022-36946)

nfqnlmangle in net/netfilter/nfnetlinkqueue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service panic because, in the case of an nfqueue verdict with a one-byte nftapayload attribute, an skbpull can encounter a negative skb-len. This plugin only works with...

PT-2025-7928

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 24.8.5 Description The issue is related to improper input validation, allowing Windows Executable hyperlink targets to be executed unconditionally when activated. Recommendations For versions prior to 24.8.5, upda...

Siemens SIMATIC Devices Linux Kernel Improper Input Validation (CVE-2022-2602)

A flaw was found in the Linux kernel. A race issue occurs between an iouring request and the Unix socket garbage collector, allowing an attacker local privilege escalation. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SIMATIC S7-1500 TM MFP BIOS Improper Input Validation (CVE-2021-42375)

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input. This plugin only...

Siemens SIMATIC Devices Linux Kernel Improper Input Validation (CVE-2022-3169)

A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVMEIOCTLRESET and the NVMEIOCTLSUBSYSRESET through the device file of the driver, resulting in a PCIe link disconnect. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Linux Kernel Improper Input Validation (CVE-2022-36879)

An issue was discovered in the Linux kernel through 5.18.14. xfrmexpandpolicies in net/xfrm/xfrmpolicy.c can cause a refcount to be dropped twice. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable,...

CVE-2025-22495

The CVE-2025-22495 affects the Eaton Network-M2 card, where an improper input validation in the NTP server configuration field can allow an authenticated high-privilege user to execute arbitrary commands. The issue has been fixed in version 3.0.4. Network-M2 is end-of-life; Network-M3 is the reco...

Eaton Network-M2 安全漏洞

Eaton Network-M2 is a wireless network card from Eaton Corporation USA. A security vulnerability exists in the Eaton Network-M2 that stems from the inclusion of an improper input validation issue that could lead to command execution...

Siemens SCALANCE W700 Improper Input Validation (CVE-2023-28578)

Memory corruption in Core Services while executing the command for removing a single event listener. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Siemens SCALANCE W700 Improper Input Validation (CVE-2023-31315)

Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE W700 Improper Input Validation (CVE-2025-24499)

Affected devices do not properly validate input while loading the configuration files. This could allow an authenticated remote attacker to execute arbitrary shell commands on the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CLSA-2025-1740051873 tomcat: Fix of CVE-2024-24549

CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests...

ROS-20250219-05

A vulnerability in the Core component of Oracle VM VirtualBox is related to a flaw in the authorization mechanism. authorization mechanism. Exploitation of the vulnerability could allow an attacker to gain privileged access to the infrastructure A vulnerability in the Core component of the Oracle...

The vulnerability of the sysctl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sysctl component in the Linux operating system’s kernel is related to improper validation of input data in the procsysmake inode function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe InDesign Improper Input Validation Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a denial of service in the application...

CVE-2025-0815

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device...

CVE-2025-0816

CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device...

CVE-2024-25571

Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-26358

A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...