FreeBSD : xorg server -- Multiple vulnerabilities (b14cabf7-5663-11f0-943a-18c04d5ea3dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b14cabf7-5663-11f0-943a-18c04d5ea3dc advisory. The X.Org project reports: The X Rendering extension allows creating animated cursors providin...

Tenda AC1206 安全漏洞

The Tenda AC1206 is a wireless Gigabit router from Tenda China. The Tenda AC1206 suffers from a buffer overflow vulnerability that originates from the formSetCfm function failing to properly validate the length of the input data, which can be exploited by an attacker to cause a denial of service...

HDF5 H5Cimage.c function buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 there is a buffer overflow vulnerability , the vulnerability stems from the file H5Cimage.c function H5Creconstructcacheentry failed to correctly validate the length of the input data size , an attacker can exploit the vulnerability to cause a denial of...

AUO DIR-825 sub_4091AC Function Buffer Overflow Vulnerability

The AUO DIR-825 is a dual-band wireless router from AUO D-Link, mainly for SMB and SOHO environments. The AUO DIR-825 suffers from a buffer overflow vulnerability, which originates from the failure of the sub4091AC function in the HTTP POST Request Handler component to correctly validate the leng...

Autel MaxiCharger AC Wallbox Commercial 安全漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. Autel MaxiCharger AC Wallbox Commercial suffers from a buffer overflow vulnerability that stems from the bleprocessesp32msg function failing to properly validate the length size of input data, which can be...

NETGEAR EX6150 安全漏洞

The NETGEAR EX6100 is a dual-band wireless extender that is primarily used to enhance the coverage of an existing WiFi network, and is especially suitable for large rooms or scenarios where there are signal blind spots. The NETGEAR EX6100 suffers from a buffer overflow vulnerability, which stems...

D-Link DIR-815 安全漏洞

The D-Link DIR-815 is a wireless router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-815 version 1.01, which originates from the failure of the function sub403794 in the file hedwig.cgi to correctly validate the length and size of the input data, and can be...

HDF5 安全漏洞

HDF5 is a library of HDF open source . HDF5 there is a buffer overflow vulnerability , the vulnerability stems from the file H5FSsection.c function H5FSsectfindnode failed to correctly validate the length of the input data size , an attacker can exploit the vulnerability to cause a denial of...

PT-2025-25901

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability has been identified in the Linux kernel where the bpf prog test run skb function runs a bpf program that redirects empty skbs, causing the fq codel drop function to attem...

CVE-2025-49177

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

AZL-64271 CVE-2025-49177 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-2

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

DEBIAN-CVE-2025-49177

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

CVE-2025-49177 Xorg-x11-server-xwayland: xorg-x11-server: tigervnc: data leak in xfixes extension's xfixessetclientdisconnectmode

A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevents out-of-bounds stream writes by validating pos. The ksmbdvfsstreamwrite function did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than ...

Tenda FH1203 安全漏洞

The Tenda FH1203 is a wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda FH1203 version 2.0.1.6, which is caused by the parameter lanMask in the fromadvsetlanip function in the file /goform/AdvSetLanip that fails to correctly validate the length of the input dat...

TOTOLINK N600R 安全漏洞

The TOTOLINK N600R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK N600R version V4.3.0cu.7866B2022506, which stems from the UPLOADFILENAME component failing to correctly validate the length size of the input data, and can be...

CVE-2025-5750

WOLFBOX Level 2 EV Charger tuyasvcdevosactivateresultparse Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Authentication is not required to...

FreeFloat FTP Server 安全漏洞

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the XCWD Command Handler component failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...

VulnCheck KEV: CVE-2025-0286

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine...

FreeFloat FTP Server 安全漏洞

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the REIN Command Handle component failing to properly validate the length size of input data, no details of the vulnerability are provided at this time...