CVE-2025-28395

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsecroadasp function via the hostip parameter...

PT-2025-16178 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07.26A1 Description: A critical issue affects the function auth asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to a stack-based buffer overflow. The attack needs to...

Improper Authentication

Overview Microsoft.AspNetCore.App.Runtime.osx-x64 is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Improper Authentication in the RefreshSignInAsync...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft fixed vulnerabilities in Visual Studio and .NET A malicious party could exploit the vulnerabilities to grant themselves elevated privileges and/or execute arbitrary code with developer privileges. Because developers tend to work under elevated privileges, it cannot be ruled out that...

UBUNTU-CVE-2025-24070

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...

The vulnerability of the ipsec_road_asp function in D-Link DI-8003 router microprogramming software allows a attacker to cause a service failure.

The vulnerability of the ipsecroadasp function in D-Link DI-8003 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the SPID.AspNetCore.Authentication library in the ASP.NET Core software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SPID.AspNetCore.Authentication library in the ASP.NET Core software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending specially crafted...

PT-2025-14112 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue is related to a Buffer Overflow in the ipsec road asp function, which can be exploited via the host ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, as a temporary...

PT-2025-14113 · D Link · D-Link Di-8100

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8100 version 16.07.26A1 Description: The issue concerns a buffer overflow in the ipsec net asp function, which can be exploited through the remot ip parameter. Recommendations: For D-LINK DI-8100 version 16.07.26A1, consider...

The vulnerability of the ASP TCP component on MacOs allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ASP TCP component on MacOs systems is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2023-20507

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity...

CVE-2023-20507

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity...

CVE-2023-20507

CVE-2023-20507 concerns an integer overflow in the AMD Secure Processor (ASP) that could allow a privileged local attacker to perform an out-of-bounds write, potentially compromising data integrity. Multiple sources corroborate the issue across AMD’s AMD-SB-5004/AMD-SB-4008 advisories and related...

PT-2025-6390

Name of the Vulnerable Software and Affected Versions ASP affected versions not specified Description An integer overflow could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity. Recommendations At the moment, there is no information...

PT-2025-6413

Name of the Vulnerable Software and Affected Versions ASP affected versions not specified Description The issue is related to improper access control in the ASP, which could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled by the attacker. This cou...

CVE-2023-20507: Integer Overflow or Wraparound

An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity...

CVE-2022-23817

Insufficient checking of memory buffer in AMD Secure Processor ASP Secure OS may allow an attacker with a malicious trusted application to read/write to the ASP Secure OS kernel virtual address space, potentially resulting in privilege escalation...

Harbin Weicheng Technology Co., Ltd. eDa CMS has information leakage vulnerability

Yida CMS YidaCMS is a free open source web site management system based on Microsoft Windows IIS platform , using ASP language and ACCESS and MSSQL dual database development is completed . Harbin Weicheng Technology Co., Ltd. YidaCMS information leakage vulnerability, attackers can use the...

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an ASP.NET configuration error. Creating a binary debug file allows a malicious actor to gain unauthorized access to confidential information.

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an error in ASP.NET configuration: the creation of a binary debug file. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

ROS-20241209-01

A vulnerability in AMD EPYC™ AGESA™ PI packages is related to incorrect input and range validation in the header of an AMD Secure Processor ASP bootloader image. of the AMD Secure Processor ASP bootloader image. Exploitation of the vulnerability could allow an attacker to, use attacker-controlled...