CVE-2025-39797 xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

PT-2025-41787

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description The Linux kernel contains a flaw within the xfrm alloc spi function in the net/xfrm/xfrm state.c module. Specifically, the function incorrectly handles Security Parameter Index SPI...

PT-2025-20400 · Crates.Io · Fast Id Map

FastMap::get lacks sufficient checks to its parameter index and is used to unsafely get a Vec element. fast id map is unmaintained...

PT-2025-37331

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw related to the handling of Security Parameter Index SPI values within the XFRM framework. Specifically, the xfrm alloc spi function may return success...

CVE-2024-48230

funadmin 5.0.2 is vulnerable to SQL Injection via the parentField parameter in the index method of \backend\controller\auth\Auth.php...

CVE-2024-36742

An issue in the oneflow.scatternd parameter OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index parameter exceeds the range of shape...

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. An SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter index that can lead to...

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. An SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter index that can lead to...

CVE-2003-1320

SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long payload...

CVE-2002-2223

Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of payloads, or 3 a long payload...

CVE-2002-2224

Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly including 1 a large Security Parameter Index SPI field, 2 large number of...

CVE-2002-2225

SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange IKE response packets, possibly involving buffer overflows using 1 a large Security Parameter Index SPI field, 2 a large number of payloads, or 3 a long...

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...

CVE-2002-0852

Buffer overflows in Cisco Virtual Private Network VPN Client 3.5.4 and earlier allows remote attackers to cause a denial of service via 1 an Internet Key Exchange IKE with a large Security Parameter Index SPI payload, or 2 an IKE packet with a large number of valid payloads...