5291 matches found
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
...
Linux Distros Unpatched Vulnerability : CVE-2019-19578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of...
Linux Distros Unpatched Vulnerability : CVE-2023-35992
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A...
Linux Distros Unpatched Vulnerability : CVE-2018-7641
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in CImg v.220. A heap-based buffer over-read in loadbmp in CImg.h occurs when loading a crafted bmp image, a different vulnerability tha...
ROS-20250827-08
Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...
Linux Distros Unpatched Vulnerability : CVE-2022-42331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work XSA-254, one entrypath performs its...
GHSA-MXVV-97WH-CFMM ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
Summary A 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytesperline stride to a tiny value while the per-row writer still emits 3 × width bytes for 24-bpp images. The row base pointer advances using the overflowed stride, so the first row immediately writes...
CVE-2025-54484
creationtimestamp| type| source ---|---|--- 2025-08-25 17:12:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxaiond3sj2d 2025-08-26 06:00:33+00:00| seen| https://infosec.place/objects/b2da2ec8-4c53-4b1c-895a-87a06d68df32...
CVE-2025-52450
creationtimestamp| type| source ---|---|--- 2025-08-22 20:32:56+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115074319985882829...
PT-2025-34448 · Mouse07410 · Asn1C
Name of the Vulnerable Software and Affected Versions: mouse07410 asn1c versions through 0.9.29 Description: An issue was discovered in decoders generated by asn1c. When using UPER Unaligned Packed Encoding Rules, the decoders fail to enforce constraints on INTEGER values if the positive bound...
CVE-2025-55398
An issue was discovered in mouse07410 asn1c thru 0.9.29 2025-03-20 - a fork of vlm asn1c. In UPER Unaligned Packed Encoding Rules, asn1c-generated decoders fail to enforce INTEGER constraints when the bound is positive and exceeds 32 bits in length, potentially allowing incorrect or malicious inp...
CVE-2025-57845
creationtimestamp| type| source ---|---|--- 2025-08-21 20:32:07+00:00| seen| https://bsky.app/profile/todb2.hugesuccess.org/post/3lwwrxgd2nax2...
Rockwell Automation FLEX 5000 Resource Management Error Vulnerability (CNVD-2025-19531)
Rockwell Automation FLEX 5000 is a high-speed counter module from Rockwell Automation. A resource management error vulnerability exists in the Rockwell Automation FLEX 5000 that stems from incorrect processing of a CIP Class 32 request causing the module to enter a fault state. No details of the...
CVE-2025-43750
creationtimestamp| type| source ---|---|--- 2025-08-20 14:32:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwtnfz3dt526...
CVE-2025-4877
There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash function. In such cases the bintobase64 function can experience an integer overflow leading to a memory under allocation, when that happens it's possibl...
CVE-2025-38556 HID: core: Harden s32ton() against conversion to 0 bits
In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...
GHSA-3XW7-V6CJ-5Q8H
creationtimestamp| type| source ---|---|--- 2025-08-18 17:06:32+00:00| seen| Telegram/-364cfjFR-lRaNIjbMQ8Az42NzRiAMdzKDwBDIi1XYOfCk...
Linux Distros Unpatched Vulnerability : CVE-2019-18425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing 32-bit PV guest OS users to gain guest OS privileges by installing and using descriptors. There is missin...
Linux Distros Unpatched Vulnerability : CVE-2019-19581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service out-of-bounds access because certain bit iteration...