29249 matches found
CVE-2025-59280 Windows SMB Client Tampering Vulnerability
...
USN-7808-2 linux-azure-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Ext4 file system; - SMB network file system; - Packet sockets; - Network traffic control; - TLS...
CVE-2025-9124
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...
CVE-2025-10610
creationtimestamp| type| source ---|---|--- 2025-10-14 13:14:44+00:00| seen| Telegram/DhwXeHm67f58XugKOq7dJAnHRyQ41y0sSIsItsn29b8l18...
CVE-2025-9124 Rockwell Automation Compact GuardLogix® 5370 Denial-Of-Service Vulnerability
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...
CVE-2025-9124
CVE-2025-9124 affects Rockwell Automation’s Compact GuardLogix 5370 controllers. The vulnerability stems from a fault when a crafted CIP unconnected explicit message is sent, leading to a denial-of-service and a major non-recoverable fault. According to the connected documents, the CVSS v4.0 base...
EUVD-2025-34182
A denial-of-service security issue in the affected product. The security issue stems from a fault occurring when a crafted CIP unconnected explicit message is sent. This can result in a major non-recoverable fault...
CVE-2025-41707 Phoenix Contact: WebSocket Handler Denial of Service
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...
CVE-2025-41707 Phoenix Contact: WebSocket Handler Denial of Service
The websocket handler is vulnerable to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger the issue without affecting the core functionality...
PT-2025-41857
Name of the Vulnerable Software and Affected Versions Affected versions not specified Description The websocket handler is susceptible to a denial of service condition. An unauthenticated remote attacker can send a crafted websocket message to trigger this issue. The core functionality is not...
PT-2025-42142
Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An improper authentication issue exists in the Windows SMB Client. This allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is...
PT-2025-46654
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Transport Layer Security TLS asynchronous decryption. Specifically, if the tls strp msg hold function fails to allocate a clone of the input...
Medium: openssl11
Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...
Microsoft Windows SMB Client 授权问题漏洞
Microsoft Windows SMB Client is a Microsoft application. An SMB client. Microsoft Windows SMB Client has a security vulnerability that can be exploited by attackers to tamper with information...
PT-2025-41918
Name of the Vulnerable Software and Affected Versions versions prior to 2025-9124 Description A security issue can lead to a denial-of-service condition. This occurs due to a fault when a specifically crafted CIP unconnected explicit message is sent, potentially resulting in a major,...
Microsoft Windows SMB Server 访问控制错误漏洞
Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. A security vulnerability exists in Microsoft Windows SMB Server that can be exploited by an...
Medium: openssl
Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...
SMBInvader
SMBInvader This script automates the...
Liferay Mentions Web is Vulnerable to Cross-site Scripting
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users t...
CVE-2025-62246
Multiple stored cross-site scripting XSS vulnerabilities in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions allow remote authenticated users t...