PT-2025-42779

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s AFS subsystem where a null pointer dereference could occur within the afs put server function. Specifically, the function accessed server-debug id...

CVE-2025-2313

Technical details about CVE-2025-2313 are not publicly available in the provided documents. No product/vendor/version information or exploit details are included. Monitor for updates as new information becomes available.

CVE-2025-5514: Improper Handling of Length Parameter Inconsistency

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web...

The vulnerability of the afs_put_server() function in the fs/afs/server.c module of the Andrew file system support module for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the afsputserver function in the fs/afs/server.c module of the Andrew file system support module in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2024-10395

No proper validation of the length of user input in httpservergetcontenttypefromextension...

CVE-2024-31029

The FreeCoAP project (specifically version 0.7 ) is vulnerable to a Denial of Service (DoS) attack due to an issue in the server_handle_regular function of the test_coap_server.c file. Remote attackers can exploit this by sending specially crafted packets, which trigger an out-of-bounds read (CWE...

CVE-2021-38122

A Cross-Site Scripting vulnerable identified in NetIQ Advance Authentication that impacts the server functionality and disclose sensitive information. This issue affects NetIQ Advance Authentication before 6.3.5.1...

Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module Improper Restriction of Excessive Authentication Attempts (CVE-2023-4625)

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period after t...

CVE-2023-4625 Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...

CVE-2023-4625: Improper Restriction of Excessive Authentication Attempts

Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...

Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Equipment : MELSEC iQ-F/iQ-R Series Vulnerability : Improper Restriction of Excessive Authentication Attempts 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...

PT-2023-16860

Name of the Vulnerable Software and Affected Versions builderio/qwik versions prior to 0.21.0 Description The issue concerns a code injection problem. The deserializer function can be accessed using the pureServerFunction feature, allowing any JavaScript code to be run by node.js. Recommendations...

CVE-2022-40267 Authentication Bypass Vulnerability in Web Server Function on MELSEC Series

Predictable Seed in Pseudo-Random Number Generator PRNG vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z x=32,64,80, y=T,R, z=ES,DS,ESS,DSS with serial number 17X or later, and versions 1.280 and prior, Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z...

CVE-2022-40267

The CVE-2022-40267 issue is an authentication bypass in Mitsubishi Electric MELSEC iQ-F/iQ-R Series web servers caused by a Predictable Seed in the PRNG used for session identifiers. TALOS details show an LCG-based generator that seeds future values with previously produced random numbers, enabli...

PT-2022-27590 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6V1.0 version 15.03.05.19 Description: A buffer overflow issue was discovered via the endIp parameter in the formSetPPTPServer function. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

CVE-2022-30625 Chcnav - P5E GNSS Directory listing

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

Denial Of Service (DoS)

@soketi/soketi is vulnerable to denial of service. The vulnerability that exists in the server function in server,ts file does not properly handle the endpoint value in dynamodb allowing an attacker to crash the application...

PT-2020-6823 · Teeworlds +4 · Teeworlds +4

Name of the Vulnerable Software and Affected Versions: Teeworlds versions 0.7.x through 0.7.4 Teeworlds version 0.7.5 is not affected, so the range can be simplified to versions prior to 0.7.5. Corrected version: Teeworlds versions prior to 0.7.5 Description: The issue is related to insufficient...

CVE-2016-9338

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...

CVE-2016-9338: Undefined Security Weakness

An issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 controller 1763-L16AWA, Series A and B, Version 14.000 and prior versions; 1763-L16BBB, Series A and B, Version 14.000 and prior versions; 1763-L16BWA, Series A and B, Version 14.000 and prior versions; and 1763-L16DWD,...