6871 matches found
felix_setup_mmio_filtering Heap Buffer Overflow DoS
Vulnerability of the felixsetupmmiofiltering function in the drivers/net/dsa/ocelot/felix.c module – The DSA kernel support driver for the Linux operating system is vulnerable to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-2970
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-2970
ConcreteCMS (up to 9.3.9) is affected by a cross-site scripting (XSS) flaw in the Switch Language Block Handler. The vulnerability arises from improper handling of the Label argument, enabling an attacker to inject scripts that get executed by end users’ browsers, potentially enabling cookie thef...
PT-2025-13643
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability has been found in ConcreteCMS, affecting an unknown function of the component Switch Language Block Handler. The manipulation of the Label argument leads to cross-site scripting. It ...
CVE-2022-49755
CVE-2022-49755 affects the Linux kernel’s USB gadget path (usb: gadget: f_fs) and specifically the ffs_ep0_queue_wait flow. The vulnerability arises from a race between ffs_ep0_write/ffs_ep0_read and functionfs_unbind, where ep0req can be freed and there is no NULL check in ffs_ep0_queue_wait, ri...
CVE-2025-29312
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
Linux kernel driver Heap Buffer Overflow DoS
The vulnerability of the aquavanjaramswitchpartitionmode function in the Linux kernel driver is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an attacker to trigger a system failure...
CVE-2025-29312
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
CVE-2025-29312
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
CVE-2025-29312
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
CVE-2025-29312
An issue in Onos version 2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch . This occurs by changing the link type from indirect to direct . The vulnerability is classified under CWE-670 (Always-Incorrect Control Flow Implementation) and carries a ...
CVE-2025-29312
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
CVE-2025-29312: Always-Incorrect Control Flow Implementation
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct...
PT-2025-12709 · Onos · Onos
Name of the Vulnerable Software and Affected Versions: onos version 2.7.0 Description: An issue in onos allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct. Recommendations: For onos version 2.7.0, conside...
Dell SmartFabric OS10 Command Injection Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a command injection vulnerability that originates from improper neutralization of special elements in a command, which can be exploited by an attacker to cause a command to be...
Dell SmartFabric OS10 Elevation of Privilege Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. A security vulnerability exists in Dell SmartFabric OS10 that originates from an unwanted privilege execution that can be exploited by an attacker to cause an elevation of privilege...
Dell SmartFabric OS10 Server-Side Request Forgery Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from a server-side request forgery vulnerability, which stems from the server not implementing an adequate authentication mechanism to confirm the origin of the request, and can be...
Dell SmartFabric OS10 Licensing Issues Vulnerability
Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. Dell SmartFabric OS10 suffers from an authorization issue vulnerability that stems from improper privilege assignment, which can be exploited by an attacker to cause elevation of privilege...
Linux kernel tb_port_update_credits Heap Buffer Overflow DoS
The vulnerability of the tbportupdatecredits function in the drivers/thunderbolt/switch.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...