Linux bpf_cgrp_storage Component DoS

The vulnerability of the bpfcgrpstorage.c component in the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

iwlwifi DoS

The vulnerability of the iwlwifi component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

etas_es58x component in the DoS

The vulnerability of the etases58x component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux bpf_local_storage Heap Buffer Overflow DoS

The vulnerability of the bpflocalstorage.c component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel DoS

The vulnerability of the drivers/gpu/drm/i915/gt/uc/intelgucsubmission.c component of the Linux operating system’s kernel is related to insufficient blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kvalloc() Heap Buffer Overflow DoS

The vulnerability of the kvalloc function in the eventlog/acpi.c component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux hyperv_fb DoS

The vulnerability of the hypervfb component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

net/mlx5 DoS

The vulnerability of the net/mlx5 component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM Display Authentication Failure

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a perpetrator to cause a system failure...

CVE-2025-20293

creationtimestamp| type| source ---|---|--- 2025-09-26 08:27:34+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-cisco-ios-ja-ios-xe-laitteissa...

TOTOLINK X6000R OS Command Injection Vulnerability

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

Cisco IOS Command-Line Interface DoS

The vulnerability of the command-line interface in Cisco IOS and IOS XE operating systems is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Cisco NX-OS Command Execution

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Connectors is related to access control violations. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

Cisco IOS XE Path Traversal

The vulnerability of Cisco IOS XE operating systems is related to incorrect restrictions on path names in the restricted access directory. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...

Cisco IOS XE Access Control Bypass

The vulnerability of the access control list component in Cisco IOS XE network devices of the Catalyst 9500X and 9600X models is related to improper access control. Exploiting this vulnerability can allow an attacker to bypass the access control list...

SonarQube operating system command injection vulnerability

SonarQube is a code inspection tool from Sonar Open Source. An operating system command injection vulnerability exists in SonarQube versions 4.0.0 through prior to 6.0.0, which stems from a failure to properly validate user input on the Windows runner and could lead to arbitrary command execution...

Dell Data Domain OS Auth Bypass (DSA-2025-159)

According to its self-reported version number, the version of Dell Data Domain OS is affected by an auth bypass vulnerability as disclosed in the DSA-2025-159 advisory: - Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15,...

EMACS Code Execution

The vulnerability of the EMACS text editor is related to the improper elimination of special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Cisco IOS XE SNMP Maintenance Failure

The vulnerability of the SNMP protocol implementation in Cisco IOS XE operating systems lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2025-11005 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...