441 matches found
CVE-2026-8479
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...
The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform developed by F5 Technologies in the United States. It integrates functions such as network traffic management, application security management, and load balancing. There is a security vulnerability in F5 BIG-IP. This vulnerability arises from the...
CVE-2026-35424 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
...
The vulnerability of the spotlight_dissect_query_loop() function in the AFP Spotlight protocol analyzer for computer network traffic analysis tools by Wireshark allows a hacker to induce a service failure.
The vulnerability of the spotlightdissectqueryloop function in the AFP protocol analyzer Spotlight, a traffic analysis tool for computer networks developed by Wireshark, is related to an uncontrolled recursion. Exploiting this vulnerability could allow attackers to cause service failures...
CVE-2026-7853
CVE-2026-7853 affects D-Link DI-8100 with firmware 16.07.26A1. The weakness lies in the HTTP Handler’s /auto_reboot.asp, where the function sprintf mishandles the enable/time argument, causing a buffer overflow. This design flaw enables remote exploitation, and public exploit access is indicated ...
CVE-2026-6520
OpenFlow v6 protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
EUVD-2026-26315
ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
PT-2026-36041
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description An infinite loop in the UDS protocol dissector allows for a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.4 to a versio...
PT-2026-36107
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.9 Description The SAML IdP implementation in the SSO module uses the AssertionConsumerServiceURL value from incoming SAML AuthnRequest messages as the destination for the SAML response without validating it agains...
The vulnerability of the NFSv4.0 component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the NFSv4.0 component in the Linux operating system is related to incorrect calculations of the size of the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-40188 goshs is Missing Write Protection for Parametric Data Values
goshs is a SimpleHTTPServer written in Go. From 1.0.7 to before 2.0.0-beta.4, the SFTP command rename sanitizes only the source path and not the destination, so it is possible to write outside of the root directory of the SFTP. This vulnerability is fixed in 2.0.0-beta.4...
The vulnerability of the l2tp_pre_exit_net() function in the net/l2tp/l2tp_core.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the l2tppreexitnet function in the net/l2tp/l2tpcore.c module of the Linux kernel is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
The vulnerability of the `tcp_ao_info_cmd()` function in the `net/ipv4/tcp_ao.c` module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the tcpaoinfocmd function in the net/ipv4/tcpao.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...
elixir-nodejs 竞争条件问题漏洞
Elixir-nodejs is an open-source project by Revelry that serves as an Elixir API for calling Node.js functions. Versions of elixir-nodejs prior to 3.1.4 contained a race condition vulnerability. This vulnerability stemmed from race conditions in the working protocol, which led to the loss of...
The vulnerability of the __mptcp_alloc_tx_skb() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mptcpalloctxskb function in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in http2-common (CVE-2025-5115)
Summary IBM Sterling Control Center is affected by a vulnerability CVE-2025-5115 of http2-common-11.0.24.jar. Vulnerability Details CVEID:CVE-2025-5115 DESCRIPTION: In Eclipse Jetty, versions =9.4.57, =10.0.25, =11.0.25, =12.0.21, =12.1.0.alpha2, an HTTP/2 client may trigger the server to send...
Moderate: python3.12 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
PT-2026-23777
Name of the Vulnerable Software and Affected Versions Philips Hue Bridge affected versions not specified Description A security issue exists in the Philips Hue Bridge related to the HomeKit Accessory Protocol. Specifically, a static nonce authentication bypass is possible. This allows an attacker...
