11007 matches found
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via repeated client-initiated TLS renegotiation requests. An attacker can exhaust server CPU resources by sending multiple renegotiation requests over unauthenticated connections. Not...
Unity Linux 20.1070e Security Update: ffmpeg (UTSA-2025-936083)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936083 advisory. Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, whic...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986579)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986579 advisory. In the Linux kernel, the following vulnerability has been resolved: block: prevent division by zero in blkrqstatsum The expression dst-nrsamples + src-nrsamples may...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986637)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986637 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity During our fuzz testing of the...
The vulnerability of the tls_rx_msg_size() function in the Linux kernel’s TLS component allows a attacker to cause a service failure.
The vulnerability of the tlsrxmsgsize function in the Linux kernel’s TLS component is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986355)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986355 advisory. In the Linux kernel, the following vulnerability has been resolved: net/nfc: fix use-after-free llcpsockbind/connect Commits 8a4cd82d nfc: fix refcount leak in...
PT-2025-41038
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s mac80211 module related to the handling of association failures with access points. Specifically, a null pointer dereference can occur when attempting...
Akka.Remote TLS did not properly implement certificate-based authentication
This is a critical network security vulnerability for Akka.Remote users who have SSL / TLS enabled on their Akka.Remote connections and were expecting certificate-based authentication to be enforced on all peers attempting to join the network. In all versions of Akka.Remote from v1.2.0 to v1.5.51...
Unity Linux 20.1070e Security Update: httpd (UTSA-2025-987456)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987456 advisory. In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTT...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414360)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414360 advisory. A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL pointer...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987236)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987236 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAPCONFREQ packets, chan-numconfrsp increases...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-018712)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-018712 advisory. u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility ...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986784)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986784 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix signed integer overflow in l2tpip6sendmsg When len = INTMAX - transhdrlen, ulen = len +...
EUVD-2025-32552
SillyTavern Web Interface Vulnerable DNS Rebinding...
CVE-2025-11294
A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...
USN-7801-2: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...
Akka.NET 访问控制错误漏洞
Akka.NET is a distributed concurrent programming framework in the Akka.NET open source. An access control error vulnerability exists in Akka.NET versions 1.2.0 through 1.5.51, which stems from a failure to implement mutual TLS authentication and could lead to unauthorized access...
CVE-2025-11294
A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2025-11294
The vulnerability CVE-2025-11294 affects Belkin F9K1015 firmware 1.00.10. It concerns the /goform/formL2TPSetup handler, where manipulating the L2TPUserName parameter triggers a buffer overflow. The issue can be exploited remotely and a public exploit is available. Multiple sources (NVD, Red Hat,...
