CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine from Extreme Networks, Inc. in the United States. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and prior to 10.6r4 through 10.6r5, which stems from a buffer overflow in the ahauth service that allows execution of...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine by Extreme Networks, Inc. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and versions prior to 10.6r4 through 10.6r5, which originates from a buffer overflow in the ahwebui service...

CVE-2023-46272

CVE-2023-46272 affects Extreme Networks IQ Engine prior to 10.6r1a and up to 10.6r4 before 10.6r5, via a stack-based buffer overflow in the ah_auth service that can lead to remote code execution. Exploitation is possible by sending crafted data to the ah_auth handler (UDP port 3001) and does not ...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

PT-2025-7481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.126 Description A heap buffer overflow in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue has a high security severity rating fr...

Google Chrome Code Execution Vulnerability (CNVD-2025-03651)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14

CVE-2024-23650 affecting package moby-engine for versions less than 24.0.9-14. A patched version of the package is available...

[SECURITY] Fedora 41 Update: webkitgtk-2.46.6-1.fc41

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

DEBIAN-CVE-2025-0995

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

AZL-56862 CVE-2025-0995 affecting package nodejs18 18.20.3-11

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Use After Free

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free through the V8 engine. An attacker can potentially exploit heap corruption by crafting a...

CVE-2024-24294

A Prototype Pollution issue in Blackprint @blackprint/engine v.0.9.0 allows an attacker to execute arbitrary code via the utils.setDeepProperty function of engine.min.js...

CVE-2024-29090

Server-Side Request Forgery SSRF vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...

Intel Management Engine 访问控制错误漏洞

Intel Management Engine Intel ME is an embedded microcontroller from Intel Corporation USA. An access control error vulnerability exists in Intel Management Engine versions prior to 2422.6.2.0 that stems from improper access control and could allow an authenticated user to elevate privileges via...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid REASON ENGINEIDUNKNOWN equals -1, and cannot be used as an array index. Additionally, it indicates that the memory is uninitialized and does not require free audio...

Astra Linux – Vulnerability in Chromium

The vulnerability allows a remote attacker to execute arbitrary code within a sandbox, through a crafted HTML page, using V8 in Google Chrome before version 131.0.6778.204. Chromium security severity: High...

Astra Linux – Vulnerability in Jinja2

Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allowed an attacker who controlled both the content and the filename of a template to execute arbitrary Python code, regardless of whether Jinja’s sandbox was used. To exploit this...

PT-2025-6634 · Intel · Intel Csme Driver

Name of the Vulnerable Software and Affected Versions: IntelR ME driver pack installer engines versions prior to 2422.6.2.0 Description: The issue is related to improper access control in some IntelR ME driver pack installer engines. This may allow an authenticated user to potentially enable...

Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities (cisco-sa-ise-multivuls-FTW9AOXF)

According to its self-reported version, Cisco Identity Services Engine Insecure Java Deserialization and Authorization Bypass Vulnerabilities is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE could allow an authenticated, remote attacker to execute arbitrary comman...