Exploit for Improper Input Validation in Microsoft

Moni...

Schneider Electric Modicon M340 Controller and Communication Modules Improper Input Validation (CVE-2025-6625)

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP command is sent to the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable...

Dell SmartFabric OS10 Software Command Injection Vulnerability (CNVD-2025-29162)

Dell SmartFabric OS10 Software is a Debian Linux-based operating system from Dell, USA. Dell SmartFabric OS10 Software suffers from a command injection vulnerability that originates from improper neutralization of special elements in commands, which can be exploited by an attacker to cause comman...

TencentOS Server 2: libreoffice (TSSA-2024:0245)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0245 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CVE-2025-65095 Lookyloo is vulnerable due to improper user input sanitization

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1...

VulnCheck KEV: CVE-2024-12912

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

PT-2025-47457

Name of the Vulnerable Software and Affected Versions StarCities versions prior to 1.1.61 Description StarCities is subject to Reflected Cross-site Scripting XSS, a condition where improper neutralization of input during web page generation allows an attacker to execute malicious scripts in the...

CVE-2025-55059

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55058

CWE-20 Improper Input Validation...

CVE-2025-55056

Multiple CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56571)

media: uvcvideo: Require entities to have a non-zero unique ID. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504672; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50089)

unicode: problematic ignorable code points. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504642; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46818)

drm/amd/display: Check gpioid before used as array index. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504743; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-43914)

md/raid5: BUGON while continue reshape after reassembling. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504506; scriptversion"1.2";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40929)

wifi: iwlwifi: mvm: check nssids before accessing the ssids.In some versions of cfg80211, the ssids poinet might be a valid one even though nssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56645)

can: j1939: vulnerability involves a reference count underflow issue in j1939sessionnew, which is fixed by adding an extra skbget to match the behavior of j1939sessionskbqueue. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47663)

staging: iio: frequency: ad9834: In ad9834writefrequency clkgetrate can return 0. In such case ad9834calcfreqreg call will lead to division by zero. Checking 'if fout clkfreq / 2' doesn't protect in case of 'fout' is 0. ad9834writefrequency is called from ad9834write, where fout is taken from tex...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-40947)

ima: Avoid blocking in RCU read-side critical section, a panic happens in imamatchpolicy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504587;...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41078)

btrfs: qgroup: quota root leak after quota disable failure. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504699; scriptversion"1.3";...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50295)

net: arc: A warning is shown because ndev-dev and pdev-dev are not the same device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504563;...