Cesanta Mongoose Web Server v7.14 contains an Integer Overflow vulnerability that can be exploited by sending malformed TLS packets, resulting in a segmentation fault and application crash.

Cesanta Mongoose Web Server v7.14 contains an Improper Neutralization of Delimiters vulnerability that can lead to out-of-bound memory writes when processing PEM certificates with unexpected characters.

A vulnerability in Cesanta Mongoose Web Server v7.14 allows attackers to trigger a segmentation fault by sending a malformed TLS packet that causes an out-of-range pointer offset.

A vulnerability in Cesanta Mongoose Web Server v7.14 allows attackers to send crafted TLS packets that trigger out-of-range pointer offsets, causing the application to read unintended heap memory.

Cesanta Mongoose Web Server v7.14 contains an Improper Neutralization of Delimiters vulnerability that can trigger an infinite loop when processing input strings with unexpected characters.

Multiple SIMATIC devices with certain versions have insufficient protection of EFI variables, allowing an authenticated attacker to alter secure boot configuration via direct communication with the flash controller.

Multiple SIMATIC device models with certain versions have a vulnerability due to insufficient EFI variable protection, allowing an authenticated attacker to disable the BIOS password via direct flash controller communication.

OpenSSL 3.x contains a stack buffer overflow vulnerability in CMS AuthEnvelopedData parsing with oversized IVs in AEAD ciphers that can cause crashes or remote code execution, affecting multiple products including Red Hat and NetApp, while versions 1.1.1 and 1.0.2 remain unaffected.

A setup component is vulnerable to DLL hijacking, enabling attackers to execute arbitrary code during legitimate application installations.

A vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 causes improper permission assignment to critical resources, potentially allowing non-privileged local attackers to access sensitive information stored on the device.

A path traversal vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 allows privileged local attackers to restore backups from outside the designated backup folder.

A vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 allows non-privileged local attackers to interact with the backupmanager service due to improper permission assignments to critical resources.

A vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 allows unauthenticated remote attackers to crash the dcpd process by sending specially crafted Profinet packets due to improper validation.

A vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 allows unauthenticated remote attackers to crash the dcpd process by sending specially crafted Profinet packets due to improper validation.

A vulnerability in SCALANCE LPE9403 devices before V4.0 HF0 allows unauthenticated remote attackers to crash the dcpd process by sending specially crafted Profinet packets due to improper validation.

A vulnerability in SCALANCE LPE9403 devices allows an unauthenticated remote attacker to crash the dcpd process by sending multiple Profinet packets in rapid succession, causing a denial of service.

A stack-based buffer overflow vulnerability in SCALANCE LPE9403 devices below version V4.0 HF0 allows a non-privileged local attacker to execute arbitrary code or cause denial of service.

A stack-based buffer overflow vulnerability in SCALANCE LPE9403 devices below version V4.0 HF0 allows a non-privileged local attacker to execute arbitrary code or cause denial of service.

SCALANCE LPE9403 devices running SINEMA Remote Connect Edge Client versions below V2.1 HF0 are vulnerable to an authentication bypass allowing non-privileged local attackers to read and modify configuration parameters.

A vulnerability in SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client allows non-privileged local attackers to execute root commands due to improper sanitization of configuration parameters in versions earlier than V2.1 HF0.

A vulnerability in SCALANCE LPE9403 devices with SINEMA Remote Connect Edge Client versions below V2.1 HF0 allows privileged local attackers to retrieve sensitive information transmitted in cleartext.

Wibu CodeMeter versions prior to 8.30a contain a privilege escalation vulnerability occurring immediately after installation when installed without elevated privileges, enabling local users to access a privileged Windows Explorer instance via the CodeMeter Control Center before restart.

Keycloak versions prior to 26.7.2 contain a critical reset-credentials vulnerability in the keycloak-services component that allows unauthenticated attackers to bypass email verification and reset any user's password, potentially gaining full account control.

Multiple Linux kernel vulnerabilities, including the critical 'Copy Fail' flaw in the algif_aead crypto module causing privilege escalation and data corruption, were fixed by reverting to out-of-place operations, affecting various subsystems and vendors such as NetApp and SUSE.