1018 matches found
CVE-2017-7308
CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...
CVE-2013-2028_Checker
CVE-2013-2028 - Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow Description The ngxhttpparsechunked function in http/ngxhttpparse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service crash and execute arbitrary code via a chunked Transfer-Encodi...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2018-12018
CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 El manejador GetBlockHeadersMsg en la implementación del protocolo LES en Go Ethereum también conocido como geth anterior a 1.8.11 puede provocar una violación de acceso debido a un error de signo entero para el índice de la matriz, lo q...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...
CVE-2026-72380 xen/pvcalls: bound backend response req_id before indexing rsp[]
In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response reqid before indexing rsp pvcallsfronteventhandler takes reqid directly from the backend-supplied ring response and uses it to index the fixed-size bedata-rsp array for a memcpy and a store, wi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002514)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002514 advisory. Integer signedness error in the ozhcdgetdesccnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote...
MiracleLinux 3 : libpng-1.2.10-16.0.1.AXS3 (AXSA:2012-447:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-447:02 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...
CVE-2019-20561
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...
CVE-2022-27882
slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation...
EUVD-2025-198714
Integer signedness error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2dX509 to return -1 and be misused as a malloc size parameter...
CVE-2025-65495
CVE-2025-65495 affects libcoap 4.3.5. The issue is a signedness error in tls_verify_call_back() inside src/coap_openssl.c that can allow a remote attacker to trigger a denial of service by sending a crafted TLS certificate, causing i2d_X509() to return -1 and be misused as a malloc() size. Public...
EUVD-2008-3780
Malware in sbrugna...
EUVD-2007-3710
Malware in sbrugna...
EUVD-2013-4773
Malware in sbrugna...
EUVD-2014-1970
Malware in sbrugna...
EUVD-2016-2981
Malware in sbrugna...
EUVD-2019-19094
Malware in sbrugna...