13985 matches found
PT-2025-17470 · Ibm · Ibm Maximo Asset Management
Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...
Yokogawa Recorder Products
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to manipulate information on the affected products. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-1566
Google ChromeOS experiences a DNS Leak vulnerability in the Native System VPN within the Dev Channel . Specifically, the system fails to properly tunnel DNS traffic during VPN state transitions , which allows network observers to expose plaintext DNS queries . This issue has been identified in ve...
CVE-2025-22103
In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer dereference in l3mdevl3rcv When delete l3s ipvlan: ip link del link eth0 ipvlan1 type ipvlan mode l3s This may cause a null pointer dereference: Call trace: iprcvfinish+0x48/0xd0 iprcv+0x5c/0x100...
Network-Centric Countermeasures against Integrated Sensing Enabled Jamming Adversaries
Recent developments in Integrated Sensing and Communication have led to new adversarial models in wireless security through Integrated Sensing and Jamming ISAJ adversaries. ISAJ adversaries, owing to their sensing capabilities, are known to inject jamming energy over the victim's frequency band,...
Siemens TeleControl Server Basic SQL
SUMMARY TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application's DB, cause denial of service and execute code in an OS shell with limited "NT AUTHORITY\NetworkService" permissions. Siemens has...
CVE-2025-29817
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
CVE-2025-28143
The Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC (firmware version V3_1.0.15 ) is vulnerable to a command injection vulnerability. The flaw exists in the /boafrm/formDiskCreateGroup API endpoint due to insufficient filtering of special characters and commands within the groupname param...
RHEL 6 : openstack-packstack (RHSA-2014:0233)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2014:0233 advisory. PackStack is a command-line utility that uses Puppet modules to support rapid deployment of OpenStack on existing servers over an SSH connection...
CVE-2025-29918 Suricata pcre: negated pcr can cause infinite loop
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability i...
CVE-2025-29915
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The AFPACKET defrag option is enabled by default and allows AFPACKET to re-assemble fragmented packets before reaching Suricata. However the default packet size in Suricata is bas...
CVE-2025-29915
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The AFPACKET defrag option is enabled by default and allows AFPACKET to re-assemble fragmented packets before reaching Suricata. However the default packet size in Suricata is bas...
CVE-2025-29915
CVE-2025-29915 affects Suricata, where the AF_PACKET defrag option being enabled by default allows AF_PACKET to re-assemble fragmented packets before they reach Suricata. The default packet size is tied to the interface MTU, causing Suricata to see truncated packets and potentially degrade visibi...
CVE-2025-29915 Suricata af-packet: defrag option can lead to truncated packets affecting visibility
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The AFPACKET defrag option is enabled by default and allows AFPACKET to re-assemble fragmented packets before reaching Suricata. However the default packet size in Suricata is bas...
CVE-2025-29915 Suricata af-packet: defrag option can lead to truncated packets affecting visibility
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The AFPACKET defrag option is enabled by default and allows AFPACKET to re-assemble fragmented packets before reaching Suricata. However the default packet size in Suricata is bas...
CVE-2025-26635
Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...
CLSA-2025-1744312522 Update of nss
Fix ecc DER wrapping...