1018 matches found
nginx-1.4.0
nginx-1.4.0 For the analysis of CVE-2013-2028 exploit: exp-nginx.rb binary for rop build: nginx...
CVE-2017-7308
CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...
CVE-2022-23967
CVE-2022-23967 In TightVNC 1.3.10, there is an integer signedness error and resultant heap-based buffer overflow in InitialiseRFBConnection in rfbproto.c for the vncviewer component. There is no check on the size given to malloc, e.g., -1 is accepted. This allocates a chunk of size zero, which wi...
CVE-2018-12018
CVE-2018-12018 Mitre https://vulners.com/cve/CVE-2018-12018 The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum aka geth before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093165)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093165 advisory. Integer signedness error in the pnginflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allo...
CVE-2026-72380 xen/pvcalls: bound backend response req_id before indexing rsp[]
In the Linux kernel, the following vulnerability has been resolved: xen/pvcalls: bound backend response reqid before indexing rsp pvcallsfronteventhandler takes reqid directly from the backend-supplied ring response and uses it to index the fixed-size bedata-rsp array for a memcpy and a store, wi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002514)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002514 advisory. Integer signedness error in the ozhcdgetdesccnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remote...
MiracleLinux 3 : libpng-1.2.10-16.0.1.AXS3 (AXSA:2012-447:02)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-447:02 advisory. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped graphic...
CVE-2019-20561
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. The bootloader has an integer signedness error. The Samsung ID is SVE-2019-15230 October 2019...
CVE-2022-27882
slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation...
EUVD-2025-198714
Integer signedness error in tlsverifycallback in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2dX509 to return -1 and be misused as a malloc size parameter...
CVE-2025-65495
CVE-2025-65495 affects libcoap 4.3.5. The issue is a signedness error in tls_verify_call_back() inside src/coap_openssl.c that can allow a remote attacker to trigger a denial of service by sending a crafted TLS certificate, causing i2d_X509() to return -1 and be misused as a malloc() size. Public...
EUVD-2003-0071
Malware in sbrugna...
EUVD-2011-0714
Malware in sbrugna...
EUVD-2002-1403
Malware in sbrugna...
EUVD-2004-1033
Malware in sbrugna...
EUVD-2007-2522
Malware in sbrugna...
EUVD-2015-5907
Malware in sbrugna...