CVE-2025-41770

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

CVE-2025-41771

CVE-2025-41771 details an SQL injection vulnerability exploitable by an authenticated user with low privileges via an endpoint in the controller’s web interface. The flaw affects a SQLite database used solely for storing notification messages, so the impact is limited to the system’s notification...

CVE-2025-41771

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification...

CVE-2025-41770 Unauthenticated Denial of Service

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

CVE-2025-41770 Unauthenticated Denial of Service

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

CVE-2025-41770

Technical details regarding CVE-2025-41770 are not publicly provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates from official advisories and connected sources.

EUVD-2024-55715

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

PT-2026-71362

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

CVE-2026-15141: Origin Validation Error

The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...

PT-2026-71267

Name of the Vulnerable Software and Affected Versions IBM Informix affected versions not specified Description Remote code execution is possible in the sq sgkprepare function due to an unchecked length field within the SQL Interface. Recommendations At the moment, there is no information about a...

PT-2026-71297

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description An input validation issue exists in the management...

PT-2026-71296

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and...

UI DoS attack

...

CVE-2024-14043: Heap-based Buffer Overflow

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2025-41770: Allocation of Resources Without Limits or Throttling

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...

CVE-2026-16051: Improper Control of Generation of Code

The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a valid signed management request to install and execute...

CVE-2024-14043 Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2024-14043 Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-based overflow

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

CVE-2026-33922

A flaw was found in Arc. This path traversal vulnerability exists within the Offline archives functionality of the local web interface. A local user with administrative credentials can exploit this by submitting an archive name containing special characters, allowing them to delete arbitrary file...

CVE-2026-68321

A flaw was found in the Linux kernel. A resource leak vulnerability exists in the txgbe network driver. This flaw occurs because Flow Director FDIR filters are not properly freed when the network interface is removed while it is in a down state. This can lead to a gradual consumption of system...