SPDY Framework DoS

The vulnerability of the SPDY framework for developing network applications, servers, and client protocols related to Netty is related to the uncontrolled distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

kernel: usbip: validate number_of_packets in usbip_pack_ret_submit()

A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the usbippackretsubmit function by sending a specially crafted RETSUBMIT response. This response, containing an oversized numberofpackets value, could cause a heap out-of-bounds...

Windows TCP/IP Privilege Escalation

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-55706

sppppapinput in sys/net/ifspppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths...

Linux TCP AO DoS

The vulnerability of the tcpaoinfocmd function in the net/ipv4/tcpao.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2019-16110

The network protocol of Blade Shadow though 2.13.3 allows remote attackers to take control of a Shadow instance and execute arbitrary code by only knowing the victim's IP address, because packet data can be injected into the unencrypted UDP packet stream...

EulerOS 2.0 SP13 : ppp (EulerOS-SA-2025-1983)

According to the versions of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description block directly...

CVE-2020-11914

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read...

Linux SCTP Protocol Heap Buffer Overflow DoS

The vulnerability of the sctpstreamoutqmigrate function in the net/sctp/stream.c module of the Linux operating system’s SCTP protocol implementation is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

PLANET switch devices security vulnerabilities

PLANET switch devices are a series of switch devices from PLANET China. A security vulnerability exists in PLANET switch devices that stems from the fact that the SNMPv3 service only supports outdated authentication protocols and encryption protocols, allowing an attacker to potentially obtain...

ROS-20240503-01

A vulnerability in the Web Audio component of Microsoft Edge and Google Chrome browsers is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code A vulnerability in the Skia graphics library of Google Chro...

CVE-2023-46752

An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MPREACHNLRI data, leading to a crash...

Cisco’s various products have security vulnerabilities

Cisco FXOS Software and UCS 6300 Series Fabric Interconnects are both products of Cisco, Inc. Cisco FXOS Software is a suite of firewall software that runs in Cisco security appliances.UCS 6300 Series Fabric The UCS 6300 Series Fabric Interconnects is a 6300 Series switching matrix device. A...

SLP Network Message DoS

The vulnerability of the SLP location determination protocol is related to insufficient control over the amount of network messages transmitted. Exploiting this vulnerability allows a malicious actor to cause service failures by registering arbitrary services to create fake UDP traffic...

ArubaOS PAPI Code Execution

The vulnerability of the PAPI network protocol implementation in Wi-Fi wireless connectivity applications from Aruba Networks relates to buffer overflow attacks. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

DNS-client TCP/IP Clients DoS

The vulnerability of DNS-client TCP/IP implementations like NicheLite and InterNiche involves an escape from the expected range of values for certain indicators. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2021-26424

Windows TCP/IP Remote Code Execution Vulnerability...

CVE-2021-22925

curl supports the -t command line option, known as CURLOPTTELNETOPTIONSin libcurl. This rarely used option is used to send variable=content pairs toTELNET servers.Due to flaw in the option parser for sending NEWENV variables, libcurlcould be made to pass on uninitialized data from a stack based...

Microsoft Windows TCP/IP information leakage vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A TCP/IP information disclosure vulnerability exists in Microsoft Windows and...