Siemens SIPROTEC 4 and SIPROTEC 4 Compact Improper Check For Unusual or Exceptional Conditions (CVE-2024-52504)

Affected devices do not properly handle interrupted operations of file transfer. This could allow an unauthenticated remote attacker to cause a denial of service condition. To restore normal operations, the devices need to be restarted. This plugin only works with Tenable.ot. Please visit...

ReQuest Serious Play Pro 安全漏洞

ReQuest Serious Play Pro is a media server from ReQuest Serious Play USA. A security vulnerability exists in ReQuest Serious Play Pro that stems from a specially crafted HTTP GET request that can cause the device to shut down or reboot, potentially resulting in an interruption of service...

CVE-2021-4465: Uncontrolled Resource Consumption

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 Pro, 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability. The device can be shut down or rebooted by an unauthenticated attacker through a single crafted HTTP GET request, allowing...

The vulnerability of the fastd VPN daemon, related to uncontrolled resource consumption, allows a violator to trigger a service failure.

The vulnerability of the fastd VPN daemon is related to uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the ParseAddress() function in the Go programming language allows a perpetrator to trigger a service failure.

The vulnerability of the ParseAddress function in the Go programming language is related to an uncontrolled resource consumption due to incorrect connection operations with strings. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the libpq library in the PostgreSQL database management system allows a hacker to cause a service failure.

The vulnerability of the libpq library in the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the UploadCfg() function in the wireless access point software of Tenda W30E allows a intruder to cause a service failure.

The vulnerability of the UploadCfg function in the Tenda W30E wireless access point’s microprogramming software is related to buffer overflows during the processing of parameter v17. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafted PO...

The vulnerability of the formDeleteMeshNode() function in the wireless access point software of Tenda W30E allows a intruder to trigger a service failure.

The vulnerability of the formDeleteMeshNode function in the wireless access point software Tenda W30E is related to buffer overflows based on a stack mechanism when processing the String parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending...

The vulnerability of the Suricata intrusion detection and prevention system, related to the swapping of pointers, allows an intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to the way the pointers are processed when handling the keyword “tls.subjectaltname”. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility lies in the copying of buffers without checking the size of the input data. This allows an attacker to trigger a service failure.

The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the cxl_cper_handle_prot_err function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the cxlcperhandleproterr function in the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

SICK AG TLOC100-100 安全漏洞

The SICK AG TLOC100-100 is a mobile robot positioning system from SICK Germany. A security vulnerability exists in the SICK AG TLOC100-100 that stems from an unauthenticated C++ API that could be exploited by a remote attacker to cause sensitive data to be accessed or modified and service...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P routing and switching platform, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the microprogramming software in the RUGGEDCOM RST2428P routing and switching platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unregulated implementation during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow a...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unregulated implementation during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow a...

The vulnerability of the Mobility Management Element (MME) component, which is part of the NR/LTE Open5GS network creation and management tool, allows a attacker to trigger a service failure.

The vulnerability of the Mobility Management Entity MME component involved in the creation and management of the NR/LTE Open5GS mobile network is related to an uncontrolled, unverifiable assertion during the processing of the MMEUES1APID field. Exploiting this vulnerability could allow attackers ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987569)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987569 advisory. In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsockconnect...

The vulnerability of the Windows Local Session Manager (LSM) component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager LSM component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the Windows Local Session Manager (LSM) component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager LSM component in Windows operating systems is related to improper validation of the specified data type during input processing. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...