CVE-2025-3712

The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack...

CVE-2025-3713

CVE-2025-3713 affects the ATEN LCD KVM over IP Switch CL5708IM. The issue is a heap-based buffer overflow in firmware versions prior to 2.2.215, allowing unauthenticated remote attackers to cause denial of service. Remediation: upgrade to firmware v2.2.215 or later (as indicated by the vulnerabil...

CVE-2025-3712 ATEN LCD KVM over IP Switch CL5708IM - Heap-based Buffer Overflow

The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack...

CVE-2025-3712

CVE-2025-3712 affects the ATEN LCD KVM over IP Switch CL5708IM. The vulnerability is a heap-based buffer overflow in firmware versions prior to v2.2.215, enabling unauthenticated remote attackers to cause a denial-of-service. Impact is limited to availability (DO S); no confidentiality or integri...

CVE-2025-20140

CVE-2025-20140 affects Cisco IOS XE Software for Wireless LAN Controllers, specifically the Wireless Network Control daemon (wncd). The issue is due to improper memory management in wncd, which can be exploited by an unauthenticated, adjacent wireless attacker by sending IPv6 network requests fro...

CVE-2025-20189

The CVE-2025-20189 entry concerns Cisco IOS XE Software on Cisco ASR 903 routers with RSP3C, where the Cisco Express Forwarding path mishandles ARP messages. The root cause is improper memory management during ARP processing, enabling an unauthenticated adjacent attacker to send crafted ARP traff...

K000140937: BIG-IP SIP ALG profile vulnerability CVE-2025-41433

Security Advisory Description When a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-41433 Impact...

CVE-2025-25218 third_party_mksh has a NULL pointer dereference vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

GHSA-6M8W-JC87-6CR7 OPA server Data API HTTP path injection of Rego

Impact When run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a single data document reference is constructed from the requested path. This query is then used...

Tenda AC15 Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 15.03.05.19 and earlier versions suffer from a buffer overflow vulnerability, which originates from the mac parameter of the function fromSetWirelessRepeat in the file /goform/WifiExtraSet failing to correctly validate...

CBL Mariner 2.0 Security Update: crash / gdb (CVE-2022-47696)

The version of crash / gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-47696 advisory. - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

Tenda AC10 serverName2 parameter buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the serverName2 parameter in AdvSetMacMtuWan failing to properly validate the length and size of the input data, which can be exploited by an attack...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-09022)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in Oracle MySQL Server that originates from mishandling of the Server: Optimizer component, which can be exploited by...

SonicOS SSLVPN NULL Pointer Dereference Denial-of-Service (DoS) Vulnerability

A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service DoS condition. CVE: CVE-2025-32818 Last updated: April 23, 2025, 6:49 p.m...

BIT-FLUENT-BIT-2024-50609

An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and listening on an IP address and port, one can send a packet with Content-Length: 0 and it crashes the server. Improper handling of the case when Content-Length is 0 allows a user with access to the...

CVE-2025-27087

A vulnerability in the kernel of the Cray Operating System COS could allow an attacker to perform a local Denial of Service DoS attack...

Security Bulletin: Vulnerabilities in Spring Web affect watsonx.data

Summary Spring Web is vulnerable to open re-direct attacks, to phishing attacks, to denial of service attack, to elevation of privilege attacks to reflected file download attacks, to security restrictions bypass attacks, to arbitrary code execution attacks, and to security restrictions bypass...

WordPress WP-Syntax plugin <= 1.2 - Author+ Potential ReDoS vulnerability

Author+ Potential ReDoS vulnerability discovered by Pierre Rudloff in WordPress Plugin WP Syntax versions = 1.2...

Adobe Commerce Cross-Site Request Forgery Vulnerability (CNVD-2025-08777)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a denial of service due to the web...