Vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server, related to buffer overflows in dynamic memory, allow attackers to execute arbitrary code.

The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protecting against Internet attacks are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary co...

The vulnerability of Fortinet FortiClientWindows protection mechanisms, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Fortinet FortiClientWindows protection devices is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created file...

The vulnerability of the Suricata intrusion detection and prevention system, related to overflowing buffers in dynamic memory when processing Eve_alerti and Eve.drop records, allows an intruder to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to the overflow of the buffer in the dynamic memory during the processing of evealert and eve-drop records. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability affects the implementation of the Internet Key Exchange (IKEv1) protocol in software for virtualizing data storage systems from IBM Storage Virtualize. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Internet Key Exchange IKEv1 protocol implementation in IBM Storage Virtualize software for virtualization of data storage systems is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to...

The vulnerability of the Adobe InCopy text creation and editing software lies in buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) component in operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows OLE operating system component, which allows a hacker to execute arbitrary code.

The vulnerability of the Windows OLE operating system is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Azure Monitor monitoring service, related to buffer overflow in dynamic memory, allows a attacker to execute arbitrary code.

The vulnerability of the Azure Monitor monitoring service is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the concat_ws() function in the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the concatws function in the SQLite database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows GDI+ interface on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows GDI+ interface on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of AnyDesk’s remote access and management software lies in buffer overflow attacks in its dynamic memory. This allows attackers to trigger a service failure.

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

PT-2025-48905

Уязвимость графического редактора Adobe Illustrator связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

AlmaLinux 10 : expat (ALSA-2025:19403)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:19403 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375 Tenable h...

The vulnerability of the Adobe Bridge file manager, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the GIMP graphic editor, related to buffer overflow in dynamic memory, allows a hacker to execute arbitrary code.

The vulnerability of the GIMP graphic editor is related to overflowing of the buffer in the dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created XWD file...

The vulnerability of the Perl JSON data structure transformation module in Cpanel::JSON::XS, related to buffer overflows in dynamic memory, allows an attacker to cause a service failure.

The vulnerability of the Perl Data Structure Transformation Module in JSON Cpanel::JSON::XS is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SIMATIC Devices Improper Input Validation (CVE-2023-51767)

OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks for authentication bypass because the integer value of authenticated in mmanswerauthpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim...

The vulnerability of the 3D model rendering software Luxion KeyShot lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Luxion KeyShot 3D modeling rendering software lies in the overflow of buffers in dynamic memory during the processing of DAE format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools relates to access to an uninitialized pointer, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Concert Software’s artificial intelligence-based automation tools is related to improper cleaning of dynamic memory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...