3649 matches found
CVE-2025-9086 Out of bounds read for cookie path
A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text HTTP using the same cookie set 3. The same cookie name is set - but with just a slash as path path="/",. Since this site is not...
CVE-2025-54906
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-54899
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-21392)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. Microsoft Excel Code Execution Vulnerability, the vulnerability is caused due to failure to free memory on the heap. An attacker can exploit this vulnerability to execute arbitrary code on the system...
IBM Concert Software Buffer Overflow Vulnerability
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from a buffer overflow vulnerability that originate...
CVE-2025-54906
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-54906
Free of memory not on the heap in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-54899
Free of memory not on the heap in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Excel 安全漏洞
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. Microsoft Excel Code Execution Vulnerability, the vulnerability is caused due to failure to free memory on the heap. An attacker can exploit this vulnerability to execute arbitrary code on the system...
CVE-2025-1761
CVE-2025-1761 affects IBM Concert Software versions 1.0.0–1.1.0, where a remote attacker could obtain sensitive information from allocated memory due to improper clearing of heap memory. The issue is documented across multiple sources, with IBM attributing a memory-disclosure risk via heap-cleari...
CVE-2025-1761 IBM Concert Software information disclosure
IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
IBM Concert Software 缓冲区错误漏洞
IBM Concert Software is IBM's generative AI-driven automated application management and monitoring tool based on the WatsonX platform, focused on optimizing the operational efficiency and reliability of applications. IBM Concert Software suffers from a buffer overflow vulnerability that originate...
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.
...
An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.
...
CVE-2025-55763
A buffer overflow flaw was found in CivetWeb. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to a denial of service or arbitrary code execution. Mitigation Mitigation for this issue is either not available or the...
CVE-2025-55763
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 latest allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of...
Linux Distros Unpatched Vulnerability : CVE-2018-21000
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption...
ImageMagick 安全漏洞
ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 6.9.13-28 and prior to 7.1.2-2, which stems from a 32-bit integer overflow ...
Linux Distros Unpatched Vulnerability : CVE-2018-1000039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or caus...