CVE-2025-40210

CVE-2025-40210 concerns the Linux kernel NFSD: NFSv4 COMPOUND operation cap. Public advisories describe that the change removing the cap on operations per COMPOUND can lead to a problematic state in pynfs COMP6 and a potential vulnerability if an attacker specifies an arbitrarily large op count i...

WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide

A newly discovered campaign has compromised tens of thousands of outdated or end-of-life EoL ASUS routers worldwide, predominantly in Taiwan, the U.S., and Russia, to rope them into a massive network. The router hijacking activity has been codenamed Operation WrtHug by SecurityScorecard's STRIKE...

MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

GHSA-MWCC-7VPP-XMV9 MongoDB driver extension affected by mongoc_bulk_operation_t's read of invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

Linux Distros Unpatched Vulnerability : CVE-2025-12119

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A mongocbulkoperationt may read invalid memory if large options are passed. CVE-2025-12119 Note that Nessus relies on the presence of the package as reported by...

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference via mongocbulkoperationt when large options are passed. An attacker can cause the application to read invalid memory. Remediation Upgrade mongo-c-driver to version 1.30.6 or higher. References - GitHub Commit...

CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

DEBIAN-CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

UBUNTU-CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119 Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

CVE-2025-12119

A mongocbulkoperationt may read invalid memory if large options are passed...

Bulk write with options may read invalid memory

A mongocbulkoperationt may read invalid memory if large options are passed...

Siemens SCALANCE and RUGGEDCOM Devices Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-53241)

x86/xen: vulnerability due to issues with the PV iret hypercall through the hypercall page, which is fixed by directly coding the sequence in xen-asm.S to avoid problems with speculation mitigations. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-44969)

s390/sclp: vulnerability could lead to data corruption if a Store Data operation is interrupted and the halt attempt fails, which was resolved by preventing the release of data buffers in such cases. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

PT-2025-47407

Name of the Vulnerable Software and Affected Versions mongoc affected versions not specified Description A mongoc bulk operation t may encounter an issue where it reads invalid memory when handling large options. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-31649

A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call...

CVE-2025-31649 Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability

A hard-coded password vulnerability exists in the ControlVault WBDI Driver functionality of Dell ControlVault3 prior to 5.15.14.19 and Dell ControlVault3 Plus prior to 6.2.36.47. A specially crafted ControlVault API call can lead to execute priviledged operation. An attacker can issue an api call...

CVE-2025-31649

CVE-2025-31649: Dell ControlVault WBDI Driver hard-coded password vulnerability in ControlVault3 prior to 5.15.14.19 and ControlVault3 Plus prior to 6.2.36.47. A specially crafted API call can lead to execution of privileged operations. TALOS confirms vulnerable versions (e.g., 5.14.3.0) and the ...

The vulnerability of the cmaCancelOperation() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver allows a malicious actor to trigger a service failure.

The vulnerability of the cmaCancelOperation function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause a service...