2010 matches found
heartbleed-vulnerability-exploitation
heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...
CVE-2026-114598
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to perform an out-of-bounds read. This buffer over-read vulnerability may lead to a denial of service (DoS) and could potentially expose adjacent memory co...
EUVD-2026-111219
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents...
CVE-2026-114598 Access of resource using incompatible type ('type confusion') in EPICS Base
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents...
CVE-2026-114597
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values within a network message can lead to an out-of-bounds read . This vulnerability allows an attacker to potentially cause a denial of service or expose adjacent memory contents . No specific exploit infor...
EUVD-2026-111216
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents...
EUVD-2026-110485
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdidatafilesgetextentdatafilepath that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename t...
APSB26-178 : Security updates available for Substance 3D Painter
Adobe has released a priority 3 update for Adobe Substance 3D Painter. This update addresses vulnerabilities rated high and medium that could result in arbitrary code execution and memory exposure. Adobe is not aware of any exploits in the wild for any of the issues addressed in this update...
PT-2026-126681
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents...
CVE-2026-116737
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdidatafilesgetextentdatafilepath that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename t...
CVE-2026-116737
The libphdi library, in versions up to 20260902 , is vulnerable to a heap out-of-bounds read within the libphdi_data_files_get_extent_data_file_path function. The root cause is an incorrect calculation where the code uses the directory prefix length instead of the basename length . An attacker ca...
CVE-2026-116737 libphdi through 20260902 Heap Out-of-Bounds Read via Extent Data File Path
libphdi through 20260902 contains a heap out-of-bounds read vulnerability in libphdidatafilesgetextentdatafilepath that uses the directory prefix length instead of the basename length. Attackers can supply a crafted Parallels disk image descriptor with a long directory prefix and short basename t...
CVE-2026-98892
A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. The notification handler fails to properly validate the size of incoming base error event payloads before copying the report array. A compromised or malfunctioning firmware interface can provi...
Linux Distros Unpatched Vulnerability : CVE-2026-116142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a...
DEBIAN-CVE-2026-116142
ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing...
CVE-2026-116142
ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing...
CVE-2026-116142
ImageMagick versions prior to 7.1.2-33 are vulnerable to a heap buffer over-read flaw during the output of a minimum-bounding-box . An attacker can provide a crafted image that triggers the over-read, potentially resulting in application crashes or the exposure of adjacent heap memory . No specif...
CVE-2026-116142 ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box
ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted image that triggers the over-read during minimum-bounding-box output, causing crashes or exposing...
