11337 matches found
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46722)
drm/amdgpu: vulnerability due to an out-of-bounds read warning when accessing mcdatai-1. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504682;...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42101)
drm/nouveau: null pointer dereference in nouveauconnectorgetmodes. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504627; scriptversion"1.3";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-42092)
gpio: davinci: There can be out of chips-irqs array boundaries access in davincigpioprobe. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504610;...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46781)
nilfs2: vulnerability involves a use-after-free bug during mount-time recovery, where inodes with recovered data are not freed if an error occurs before the log writer starts, leading to potential memory issues. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53239)
ALSA: 6fire: The current 6fire code tries to release the resources right after the call of usb6firechipabort. But at this moment, the card object might be still in use as we're calling sndcardfreewhenclosed and cause potential UAFs. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46771)
can: bcm: Remove proc entry when dev is unregistered. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504624; scriptversion"1.3";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53052)
iouring/rw: vulnerability due to iouring not checking for IOCBNOWAIT when starting an ODIRECT write, leading to potential deadlocks if the mount point is being frozen. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-46755)
wifi: mwifiex: Do not return unused priv in mwifiexgetprivbyid. mwifiexgetprivbyid returns the priv pointer corresponding to the bssnum and bsstype, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56704)
9p/xen: A fix release of IRQ Kernel logs indicate an IRQ was double- freed. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504663;...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49895)
drm/amd/display: vulnerability caused by adding a check to ensure the index 'i' is within bounds before accessing transfer function points in cmhelpertranslatecurvetodegammahwformat, preventing buffer overflow errors. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56701)
powerpc/pseries: The dtlaccesslock needs to be a rwsempahore, a sleeping lock, because the code calls kmalloc while holding it, which can sleep. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-53183)
um: net: The drvdata is not available in release. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504558; scriptversion"1.2";...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-50184)
virtiopmem: Check device status before requesting flush. If a pmem device is in a bad status, the driver side could wait for host ack forever in virtiopmemflush, causing the system to hang. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56648)
net: hsr: avoid potential out-of-bound access in fillframeinfo. By extending the check to cover packets with only 14 bytes, it prevents uninitialized values from causing undefined behavior or security issues. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-56643)
dccp: vulnerability in DCCP Datagram Congestion Control Protocol involves a memory leak in dccpfeatchangerecv where memory allocated for a new SP feature value is not freed if dccpfeatpushconfirm fails, leading to potential resource exhaustion. This plugin only works with Tenable.ot. Please visit...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-47668)
lib/generic-radix-tree.c: race in genradixptralloc. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504685; scriptversion"1.3";...
EUVD-2025-197848
CWE-20 Improper Input Validation...
EUVD-2025-197846
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
