GZDoom 安全漏洞

GZDoom is a ZDoom open source feature-centric port of all Doom engine games based on ZDoom. A security vulnerability exists in GZDoom version v4.13.1 that stems from improper parsing of malicious PK3 files by ZScript functions. An attacker exploiting this vulnerability could execute arbitrary cod...

CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10

CVE-2023-45288 affecting package moby-engine for versions less than 25.0.3-10. A patched version of the package is available...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

AZL-57089 CVE-2025-0999 affecting package nodejs18 18.20.3-11

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

mysql: MySQL Server InnoDB Denial of Service and Unauthorized Data Modification Vulnerability

A flaw was found in MySQL Server, specifically in the InnoDB component. This vulnerability allows a high-privileged attacker to cause a hang or frequently repeatable crash, resulting in a complete denial of service via network access through multiple protocols...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine from Extreme Networks, Inc. in the United States. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and prior to 10.6r4 through 10.6r5, which stems from a buffer overflow in the ahauth service that allows execution of...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine by Extreme Networks, Inc. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and versions prior to 10.6r4 through 10.6r5, which originates from a buffer overflow in the ahwebui service...

CVE-2023-46272

CVE-2023-46272 affects Extreme Networks IQ Engine prior to 10.6r1a and up to 10.6r4 before 10.6r5, via a stack-based buffer overflow in the ah_auth service that can lead to remote code execution. Exploitation is possible by sending crafted data to the ah_auth handler (UDP port 3001) and does not ...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

PT-2025-7481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.126 Description A heap buffer overflow in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue has a high security severity rating fr...

Google Chrome Code Execution Vulnerability (CNVD-2025-03651)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14. A patched version of the package is available...

[SECURITY] Fedora 41 Update: webkitgtk-2.46.6-1.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

DEBIAN-CVE-2025-0995

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

AZL-56862 CVE-2025-0995 affecting package nodejs18 18.20.3-11

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Use After Free

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the V8 engine. An attacker can potentially exploit heap corruption by crafting a...