CVE-2025-20224

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service DoS...

CVE-2025-20217

A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect...

CVE-2025-20217

CVE-2025-20217 affects Cisco Secure Firewall Threat Defense Software Snort 3 Detection Engine. A vulnerability in the packet inspection processing allows an unauthenticated, remote attacker to trigger an infinite loop while inspecting traffic, causing a DoS condition. The system watchdog restarts...

CVE-2025-50518

A use-after-free vulnerability exists in the coapdeletepdulkd function within coappdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this...

CVE-2025-5941 Out-of-Bounds Read Vulnerability in Netskope Client

Netskope is notified about a potential gap in its agent NS Client in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, based on the exact configuration. A successful...

CVE-2025-51986

CVE-2025-51986 affects the demo/LINUXTCP implementation of freemodbus (v2018-09-12). The root cause is a crafted length value in a packet that can cause an infinite loop, per multiple connected sources (NVD/Red Hat/CIRCL/CVE lists). Impact stated as potential denial of service via infinite loop; ...

Cisco多款产品 安全漏洞

Cisco IOS and others are products of Cisco, an American company.Cisco IOS is a set of operating systems developed for its network devices.Cisco Adaptive Security Appliances Software ASA Software is a set of firewall and network security platforms.Cisco IOS XE is Cisco IOS XE is an operating syste...

CVE-2025-51986

An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...

PT-2025-33118

Name of the Vulnerable Software and Affected Versions: Netskope NS Client affected versions not specified Description: Netskope has been notified of a potential issue in its agent NS Client where a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. Successfu...

PT-2025-33317 · Cisco +1 · Cisco Secure Firewall Threat Defense +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Threat Defense FTD Software Snort 3 Detection Engine affected versions not specified Description: A vulnerability in the packet inspection functionality of the Snort 3 Detection Engine could allow a remote, unauthenticat...

CVE-2025-51986

An issue was discovered in the demo/LINUXTCP implementation of cwalter-at freemodbus v.2018-09-12 allowing attackers to reach an infinite loop via a crafted length value for a packet...

PT-2025-33355 · Unknown · Freemodbus

Name of the Vulnerable Software and Affected Versions: freemodbus version 2018-09-12 Description: An issue was discovered in the demo/LINUXTCP implementation of freemodbus, allowing attackers to reach an infinite loop via a crafted length value for a packet. Recommendations: At the moment, there ...

Malicious File Parsing

@finos/git-proxy is vulnerable to malicious file parsing. The vulnerability is due to improper PACK signature detection in parsePush.ts, which allows an attacker to embed misleading signatures in commit content and craft packet structures to bypass approval or hide commits...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-1993)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : RDMA/core: Silence oversized kvmalloc warningCVE-2025-37867 igb: revert rtnllock that causes deadlockCVE-2023-53060 bnxten: Avoid order-5 memory...

CVE-2025-8800

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esmhandlepdnconnectivityrequest of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version...

Linux Distros Unpatched Vulnerability : CVE-2021-20268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls...

Linux Distros Unpatched Vulnerability : CVE-2023-53068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: usb: lan78xx: Limit packet length to skb-len Packet length retrieved from descriptor may be larger than the actual socket buffer length. In such case the...

Linux Distros Unpatched Vulnerability : CVE-2025-22117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pktlen in icevcfdirparseraw Fix using the untrusted value ...

Linux Distros Unpatched Vulnerability : CVE-2025-38339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: fix JIT code size calculation of bpf trampoline archbpftrampolinesize provides...

Linux Distros Unpatched Vulnerability : CVE-2024-26752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: pass correct message length to ip6appenddata l2tpip6sendmsg needs to avoid accounting for the transport header twice when splicing more data into an alrea...