PT-2025-12711

Name of the Vulnerable Software and Affected Versions OpenDaylight Service Function Chaining SFC Subproject versions Sodium-SR4 and below Description The issue is related to insecure Shiro cookie configurations, which can be exploited by attackers to access sensitive information via a...

CVE-2025-29314

The OpenDaylight Service Function Chaining (SFC) subproject is vulnerable to a Missing Encryption of Sensitive Data issue in versions SFC Sodium-SR4 and below. The root cause is the use of insecure Shiro cookie configurations, specifically where _secureCookies=False and _httpOnly=False are set. T...

CVE-2025-29314: Missing Encryption of Sensitive Data

Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack...

CVE-2025-29315: Improper Access Control

An issue in the Shiro-based RBAC Role-based Access Control mechanism of OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request...

CVE-2025-29313: Improper Resource Shutdown or Release

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

CVE-2025-29313

Use of incorrectly resolved name or reference in OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to cause a Denial of Service DoS...

PT-2025-12710

Name of the Vulnerable Software and Affected Versions OpenDaylight Service Function Chaining SFC Subproject versions Sodium-SR4 and below Description The issue is related to the use of incorrectly resolved names or references, which can lead to a Denial of Service DoS. This allows attackers to...

CVE-2025-29313

The OpenDaylight Service Function Chaining (SFC) subproject is vulnerable to a Denial of Service (DoS) due to the improper handling of name resolution or references. Specifically, a lack of consistency in maintaining independent representations of shared state can lead to two different OpenFlowNo...

CVE-2024-27088 es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`

es5-ext contains ECMAScript 5 extensions. Passing functions with very long names or complex default argument names into functioncopy or functiontoStringTokens may cause the script to stall. The vulnerability is patched in v0.10.63...

CVE-2023-47024

Cross-Site Request Forgery CSRF in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custom content types...

Design/Logic Flaw

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

CVE-2022-1300

Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service...

PT-2022-2381

Name of the Vulnerable Software and Affected Versions TRUMPF TruTops products affected versions not specified Description The issue is related to the exposure of a service function in TRUMPF TruTops products without necessary authentication. This could allow unauthorized access to change data or...

The vulnerability of the rtas_args.nargs function in the arch/powerpc/kvm/book3s_rtas.c driver of the Linux operating system allows a attacker to trigger memory corruption on the host operating system.

The vulnerability of the rtasargs.nargs function in the arch/powerpc/kvm/book3srtas.c driver of the Linux operating system is related to the possibility of writing outside the specified field. Exploiting this vulnerability could allow an attacker to cause damage to the host’s operating system’s...

Input validation

A vulnerability in the reassembly logic for fragmented IPv4 packets of Cisco StarOS running on virtual platforms could allow an unauthenticated, remote attacker to trigger a reload of the npusim process, resulting in a denial of service DoS condition. There are four instances of the npusim proces...

Debian DSA-4111-1 : libreoffice - security update

Mikhail Klementev, Ronnie Goodrich and Andrew Krasichkov discovered that missing restrictions in the implementation of the WEBSERVICE function in LibreOffice could result in the disclosure of arbitrary files readable by the user who opens a malformed document. C Tenable Network Security, Inc. The...

CVE-2017-12566

In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c...

CVE-2011-0431

The afslinuxlock function in afs/LINUX/osivnodeops.c in the kernel module in OpenAFS 1.4.14, 1.4.12, 1.4.7, and possibly other versions does not properly handle errors, which allows attackers to cause a denial of service via unknown vectors. NOTE: some of these details are obtained from third par...