10051 matches found
PT-2025-32396 · Unknown · Actfax Server
Name of the Vulnerable Software and Affected Versions: ActFax Server version 4.32 Description: A stack-based buffer overflow vulnerability exists in the "Import Users from File" functionality of the client interface. The application does not properly validate the length of tab-delimited fields in...
Linux Distros Unpatched Vulnerability : CVE-2018-12633
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with...
Linux Distros Unpatched Vulnerability : CVE-2024-23851
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - copyparams in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate more than INTMAX bytes, and crash, because of a missing...
ipc: fix to protect IPCS lookups using RCU
...
atm: Revert atm_account_tx() if copy_from_iter_full() fails.
...
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
...
bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
...
Linux Distros Unpatched Vulnerability : CVE-2022-50014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLLFORCE COW security issue and remove FOLLCOW Ever since the Dirty COW...
Linux Distros Unpatched Vulnerability : CVE-2019-16714
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 5.2.14, rds6incinfocopy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos and...
The vulnerability of the sub_41A914() function in Netgear JWNR2000v2 software allows a hacker to cause a service failure.
The vulnerability of the sub41A914 function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to cause service interruption...
Linux Distros Unpatched Vulnerability : CVE-2025-38090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/rapidio/riocm.c: prevent possible heap overwrite In riocmcdevioctlRIOCMCHANSEND - cmchanmsgsend - riocmchsend cmchanmsgsend checks that userspace didn't...
Linux Distros Unpatched Vulnerability : CVE-2025-37790
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCKRCUFREE Bind lookup runs under RCU, so ensure that a socket doesn't go aw...
The vulnerability of the sub_4238E8() function in Netgear JWNR2000v2 microprogrammed software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sub4238E8 function in Netgear JWNR2000v2 microprogrammed software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...
Linux Distros Unpatched Vulnerability : CVE-2022-49920
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: netlink notifier might race to release objects commit release path is...
CVE-2025-27072 Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length...
CVE-2025-27072
CVE-2025-27072 describes an information-disclosure issue in Qualcomm chipsets during EAVB BE side packet processing with an invalid header length. Connected sources reiterate: vulnerable component is in the EAVB BE processing path; root cause relates to handling of header lengths leading to leaka...
CVE-2025-27071 Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Memory corruption while processing specific files in Powerline Communication Firmware...
CVE-2025-27071
CVE-2025-27071 is a memory corruption vulnerability affecting Powerline Communication Firmware (buffer copy without checking input size). The CVE entry (CVE-2025-27071) and related feeds describe memory corruption when processing specific files. The NVD entry lists a high-severity impact with CVS...