147 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iperf3 (UTSA-2023-002138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002138 advisory. iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. Tenable has extracted the preceding description block...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel up to 5.15.2, hwatlutilsfwrpcwait in drivers/net/ethernet/aquantia/atlantic/hwatl/hwatlutils.c allows an attacker who can introduce a crafted device to trigger an out-of-bounds write by using a crafted length value...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the MMS BER decoder process. An attacker can cause the service to terminate unexpectedly by supplying a crafted length value that is not properly validated, resulting in a read past the end of a heap buffer...
JLSEC-2026-759
iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field...
CVE-2026-14683
A vulnerability was detected in HdrHistogram up to 2.2.2. Affected by this issue is the function org.HdrHistogram.AbstractHistogram.decodeFromCompressedByteBuffer of the file src/main/java/org/HdrHistogram/AbstractHistogram.java. The manipulation of the argument lengthOfCompressedContents results...
CVE-2026-32941
Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM Out-of-Memory vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGReadEnvelope functions trust an...
CVE-2026-32941 Sliver Vulnerable to Authenticated OOM via Memory Exhaustion in mTLS/WireGuard Transports
Sliver is a command and control framework that uses a custom Wireguard netstack. Versions 1.7.3 and below contain a Remote OOM Out-of-Memory vulnerability in the Sliver C2 server's mTLS and WireGuard C2 transport layer. The socketReadEnvelope and socketWGReadEnvelope functions trust an...
CVE-2026-4010
In ThakeeNathees pocketlang (up to cc73ca61b113d48ee130d837a7a8b145e41de5ce), the vulnerability targets the function pkByteBufferAddString where the argument length is manipulated (input 4294967290), causing memory corruption. This is a local attack; the exploit is public. The description notes t...
CVE-2025-64096
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to 1.4.2, there is a missing bounds check in CryptoKeyupdate...
EUVD-2021-12555
Malware in sbrugna...
EUVD-2014-8164
Malware in sbrugna...
EUVD-2008-1384
Malware in sbrugna...
EUVD-2015-8663
Malware in sbrugna...
EUVD-2014-7694
Malware in sbrugna...
EUVD-2014-7949
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414522)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414522 advisory. In the Linux kernel through 5.15.2, hwatlutilsfwrpcwait in drivers/net/ethernet/aquantia/atlantic/hwatl/hwatlutils.c allows an attacker who can introduce a crafted...
EUVD-2025-24936
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-3955
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The usbiprecvxbuff function in drivers/usb/usbip/usbipcommon.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service out-of-boun...
SILA Embedded Solutions Freemodbus 安全漏洞
SILA Embedded Solutions Freemodbus is an open source Modbus protocol stack from SILA Embedded Solutions. A security vulnerability exists in SILA Embedded Solutions Freemodbus v.2018-09-12, which stems from a specially crafted length value leading to an infinite loop...
K000148693: libssh2 vulnerability CVE-2015-1782
Security Advisory Description The kexagreemethods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service crash or have other unspecified impact via crafted length values in an SSHMSGKEXINIT packet. CVE-2015-1782 Impact There is no impact; F5 products are not affected ...