263181 matches found
CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
The vulnerability of the FRRouting software implementation for Unix-like systems lies in the fact that it allows for arbitrary code to be executed by writing beyond the buffer boundaries in memory.
The vulnerability of the FRRouting software implementation for Unix-like systems lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3023-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3023-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. -...
CVE-2024-32389
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the update URLs component...
PT-2026-60473
Name of the Vulnerable Software and Affected Versions HCL DFXAnalytics affected versions not specified Description A buffer overflow exists because the application fails to properly validate input sizes. This allows an attacker to send an excessive amount of data into a memory container,...
PT-2026-60429
Name of the Vulnerable Software and Affected Versions libheif affected versions not specified Description A heap buffer overflow occurs in the uncompressed encoder when processing a HEIF image where the alpha plane is larger than the picture. This happens because the encoder writes past the...
CVE-2024-32389
Buffer Overflow vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the update URLs component...
CVE-2021-27137
CVE-2021-27137 affects DD-WRT’s UPnP service (ssdp.c) before change set 45724, where an unsafe strcpy copies user-supplied data into a fixed 128-byte buffer, enabling a remote unauthenticated attacker to overflow the buffer via M-SEARCH requests on UDP/1900. By default UPnP is off and bound to in...
EUVD-2021-34854
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a request that would overflow an internal fixed buffer. Exploitation requires the DD-WRT user to enable UPnP which is off...
Oracle Linux 8 : libreoffice (ELSA-2026-35839)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-35839 advisory. - Fix CVE-2026-8357 buffer overflow in Calc formula compiler with formulas composed entirely of open tokens Tenable has extracted the preceding description blo...
Linux Distros Unpatched Vulnerability : CVE-2026-51105
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in aMULE-Project aMule v.2.3.3 allows a remote attacker to cause a denial of service via the OPSERVERMESSAGE Handler. CVE-2026-511...
Alibaba Cloud Linux 3 : 0194: libreoffice (ALINUX3-SA-2026:0194)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0194 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-8357: LibreOffice Calc compiles cell...
MiracleLinux 9 : httpd-2.4.62-13.el9_8.1 (AXSA:2026-1272:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1272:07 advisory. httpd: modproxyajp: heap-based buffer over-read and memory disclosure in ajpparsedata CVE-2026-34059 httpd: modproxyajp: heap-based buffer over-read...
Alibaba Cloud Linux 3 : 0199: libtasn1 (ALINUX3-SA-2026:0199)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0199 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-13151: Stack-based buffer overflow in...
openSUSE 16 Security Update : libxml2 (openSUSE-SU-2026:21317-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21317-1 advisory. This update for libxml2 fixes the following issues - CVE-2026-6732: crafted XSD-validated document can cause a denial of service bsc1262719. -...
libsolv security update
0.7.33-5 - Fix a buffer overflow when decompressing solv pages CVE-2026-48864 RHEL-178270 0.7.33-4 - Cope with integer overflow in data size arithmetics in repoaddsolv CVE-2026-9149 RHEL-178267 0.7.33-3 - Fix a buffer overflow when copying SHA-384/512 checksum from a Debian repository CVE-2026-91...