CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-48498
https://notcve.org/view.php?id=CVE-2025-48498
22 Jul 2025 — A specially crafted protocol buffer message can lead to a denial of service. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199 • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-36512
https://notcve.org/view.php?id=CVE-2025-36512
22 Jul 2025 — A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200 • CWE-617: Reachable Assertion •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-35966
https://notcve.org/view.php?id=CVE-2025-35966
22 Jul 2025 — A specially crafted protocol buffer message can lead to a denial of service. • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201 • CWE-476: NULL Pointer Dereference •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2025-54134 – HAX CMS NodeJs's Improper Error Handling Leads to Denial of Service
https://notcve.org/view.php?id=CVE-2025-54134
21 Jul 2025 — HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend. In versions 11.0.8 and below, the HAX CMS NodeJS application crashes when an authenticated attacker provides an API request lacking required URL parameters. This vulnerability affects the listFiles and saveFiles endpoints. This vulnerability exists because the application does not properly handle exceptions which occur as a result of changes to user-modifiable URL parameters. This is fixed in version 11.0.9. • https://github.com/haxtheweb/haxcms-nodejs/blob/main/src/routes/listFiles.js#L22 • CWE-20: Improper Input Validation CWE-248: Uncaught Exception CWE-703: Improper Check or Handling of Exceptional Conditions •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2025-54121 – Starlette has possible denial-of-service vector when parsing large files in multipart forms
https://notcve.org/view.php?id=CVE-2025-54121
21 Jul 2025 — Starlette is a lightweight ASGI (Asynchronous Server Gateway Interface) framework/toolkit, designed for building async web services in Python. In versions 0.47.1 and below, when parsing a multi-part form with large files (greater than the default max spool size) starlette will block the main thread to roll the file over to disk. This blocks the event thread which means the application can't accept new connections. The UploadFile code has a minor bug where instead of just checking for self._in_memory, the lo... • https://github.com/encode/starlette/blob/fa5355442753f794965ae1af0f87f9fec1b9a3de/starlette/datastructures.py#L436C5-L447C14 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 4.8EPSS: 0%CPEs: 2EXPL: 1CVE-2025-41681 – Persistent Cross-Site Scripting via POST Requests Due to Improper Neutralization of Input
https://notcve.org/view.php?id=CVE-2025-41681
21 Jul 2025 — Helmholz Industrial Router REX100 versions prior to 2.3.3 and MBConnectline mbNET.mini versions prior to 2.3.3 suffer from buffer overflow, command injection, denial of service, cross site scripting, and remote SQL injection vulnerabilities. • https://packetstorm.news/files/id/207683 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 1CVE-2025-41679 – Unauthenticated Buffer Overflow in Conftool Service Leading to Denial of Service
https://notcve.org/view.php?id=CVE-2025-41679
21 Jul 2025 — An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service. Helmholz Industrial Router REX100 versions prior to 2.3.3 and MBConnectline mbNET.mini versions prior to 2.3.3 suffer from buffer overflow, command injection, denial of service, cross site scripting, and remote SQL injection vulnerabilities. • https://packetstorm.news/files/id/207683 • CWE-787: Out-of-bounds Write •
CVSS: 7.7EPSS: 0%CPEs: 2EXPL: 1CVE-2025-41678 – SQL Injection via POST Requests Allowing Configuration Database Manipulation
https://notcve.org/view.php?id=CVE-2025-41678
21 Jul 2025 — Helmholz Industrial Router REX100 versions prior to 2.3.3 and MBConnectline mbNET.mini versions prior to 2.3.3 suffer from buffer overflow, command injection, denial of service, cross site scripting, and remote SQL injection vulnerabilities. • https://packetstorm.news/files/id/207683 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 1CVE-2025-41677 – Resource Exhaustion via POST Requests to send-mail Action
https://notcve.org/view.php?id=CVE-2025-41677
21 Jul 2025 — Helmholz Industrial Router REX100 versions prior to 2.3.3 and MBConnectline mbNET.mini versions prior to 2.3.3 suffer from buffer overflow, command injection, denial of service, cross site scripting, and remote SQL injection vulnerabilities. • https://packetstorm.news/files/id/207683 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 1CVE-2025-41676 – Resource Exhaustion via POST Requests to send-sms Action
https://notcve.org/view.php?id=CVE-2025-41676
21 Jul 2025 — Helmholz Industrial Router REX100 versions prior to 2.3.3 and MBConnectline mbNET.mini versions prior to 2.3.3 suffer from buffer overflow, command injection, denial of service, cross site scripting, and remote SQL injection vulnerabilities. • https://packetstorm.news/files/id/207683 • CWE-400: Uncontrolled Resource Consumption •