CVE-2024-20406

A vulnerability in the segment routing feature for the Intermediate System-to-Intermediate System IS-IS protocol of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient...

Exploit for CVE-2025-22652

CVE-2025-22652 1️⃣ Component type WordPress plugin 2️...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20250203-09

Vulnerability of the streaming python-multipart parser is related to insufficient input validation when processing "Content-Type" HTTP header value using regular expressions. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

CVE-2024-7695

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

CVE-2024-7695

CVE-2024-7695 is an out-of-bounds write vulnerability reported for multiple Moxa PT switches. The issue stems from insufficient input validation that allows writing data beyond buffer bounds, with the documented impact of a denial-of-service attack. Connected sources provide concrete details on a...

CVE-2024-7695 Out-of-bounds Write Vulnerability

Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service atta...

PT-2025-3693 · Moxa · Eds-405A Series +47

Name of the Vulnerable Software and Affected Versions: Multiple network switches affected versions not specified Description: The issue is caused by insufficient input validation, allowing data to be written to memory outside the bounds of the buffer. This could result in a denial-of-service...

Moxa PT Switches 安全漏洞

MOXA PT-7828 and others are products of Moxa China.MOXA PT-7828 is a managed rack-mount Ethernet switch.MOXA PT-G503 is a series of Layer 2 managed switches.MOXA PT-7728 is a switches. A security vulnerability exists in Moxa PT Switches that stems from insufficient validation of input...

Advisory ROSA-SA-2025-2655

Software: webkit4 2.44.1 OS: ROSA-CHROME packageevrstring: webkit4-2.44.1-1 CVE-ID: CVE-2023-28198 BDU-ID: 2023-04538 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the macOS operating system WebKit web page display module is associated with a post-release exploit error. Exploitation of the...

Advisory ROSA-SA-2025-2645

software: binutils 2.38 WASP: ROSA-CHROME packageevrstring: binutils-2.38-4 CVE-ID: CVE-2023-1972 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Buffer overflow vulnerability in bfdselfslurpversiontables in bfd/self.c could cause loss of availability. CVE-STATUS: The vulnerability has been resolved...

Vulnerability of the driver/net/wireless/mediatek/mt76/mt7915/mcu.c component in Linux kernel, allowing a hacker to cause a service failure

The vulnerability in the drivers/net/wireless/mediatek/mt76/mt7915/mcu.c component of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

PT-2025-4272 · Oracle · Oracle Financial Services Behavior Detection Platform

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Behavior Detection Platform versions 8.0.8.1, 8.1.2.7, 8.1.2.8 Description: The issue is related to insufficient input validation in the Oracle Financial Services Behavior Detection Platform, allowing an...

PT-2025-4274 · Oracle · Jd Edwards Enterpriseone Orchestrator

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Orchestrator versions prior to 9.2.9.2 Description: The issue is related to insufficient input validation in the E1 IOT Orchestrator Security component. It can be easily exploited by a low-privileged attacker with...

The vulnerability of the Action Pack framework for the Ruby interpreter allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Action Pack framework’s Ruby interpreter lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-20086

CVE-2025-20086 affects Mattermost Server: vulnerable versions include 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3, and 10.2.x

CVE-2025-20086 Insufficient Input Validation on Post Props

Mattermost versions 10.2.x = 10.2.0, 9.11.x = 9.11.5, 10.0.x = 10.0.3, 10.1.x = 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...

CVE-2025-20088

CVE-2025-20088 affects Mattermost Server: vulnerable in Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x

CVE-2025-21083 Insufficient Input Validation on Post Props

Mattermost Mobile Apps versions =2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post...