7198 matches found
CVE-2025-8817
CVE-2025-8817 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000. The vulnerability exists in the setLan function of /goform/setLan and is triggered by manipulating the lan2enabled argument, causing a stack-based buffer overflow. This vulnerability allows remote exploitation and ha...
CVE-2025-8816
A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function setOpMode of the file /goform/setOpMode. The manipulation of the argument ethConv leads to stack-based buffer overflow. It is possible to launch the attack remotely...
Linux Distros Unpatched Vulnerability : CVE-2017-20006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile. CVE-2017-20006...
Linux Distros Unpatched Vulnerability : CVE-2023-34823
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fdkaac before 1.0.5 was discovered to contain a stack overflow in readcallback function in src/main.c. CVE-2023-34823 Note that Nessus relies on the presence of...
Linux Distros Unpatched Vulnerability : CVE-2024-3859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font. This...
PT-2025-32404 · Photodex · Proshow Producer
Name of the Vulnerable Software and Affected Versions: Photodex ProShow Producer version 5.0.3256 Description: Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in...
CVE-2025-30405
An integer overflow vulnerability exists in ExecuTorch during the loading of models. This flaw allows objects to be placed outside their allocated memory area, which could lead to code execution or other undesirable effects. The vulnerability affects versions of ExecuTorch prior to commit 0830af8...
CVE-2025-30404
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9dcba006...
PT-2025-32086 · Unknown · Kernel Gyroscope Module
Name of the Vulnerable Software and Affected Versions: kernel gyroscope module affected versions not specified Description: The issue is a buffer overflow caused by insufficient data verification within the kernel gyroscope module. Successful exploitation could impact system availability...
CVE-2025-7033
Rockwell Automation Arena Simulation contains a memory abuse vulnerability (CVE-2025-7033) where processing a crafted DOE/file can cause reads/writes past allocated memory. Exploitation requires a user action (e.g., opening a malicious file/webpage) and could enable local code execution or inform...
PT-2025-31992
Name of the Vulnerable Software and Affected Versions Foxit Reader versions 5.4.4.11281 Foxit Reader Plugin version 2.2.1.530 Description The Foxit Reader Plugin version 2.2.1.530, included with Foxit Reader 5.4.4.11281, contains a stack-based buffer overflow in the npFoxitReaderPlugin.dll module...
PT-2025-32170 · Ibm · Ibm Tivoli Monitoring
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 20 Description: IBM Tivoli Monitoring is susceptible to a heap-based buffer overflow due to insufficient bounds checking. A remote attacker could exploit this issue to overfl...
PT-2025-31988 · Unknown · Actfax Server
Name of the Vulnerable Software and Affected Versions: ActFax Server version 5.01 Description: A stack-based buffer overflow exists in the server’s RAW protocol interface. The interface does not safely process user-supplied data in the @F506 fax header fields due to the insecure use of strcpy...
CVE-2025-7844 wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow
Exporting a TPM based RSA key larger than 2048 bits from the TPM could overrun a stack buffer if the default MAXRSAKEYBITS=2048 is used. If your TPM 2.0 module supports RSA key sizes larger than 2048 bit and your applications supports creating or importing an RSA private or public key larger than...
Important: tomcat
Issue Overview: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from...
Advisory ROSA-SA-2025-2908
Software: libarchive 3.6.2 OS: ROSA-CHROME unaffected versions = libarchive-3.6.2-4 affected versions libarchive-3.6.2-4 CVE-ID: CVE-2024-26256 BDU-ID: 2024-02924 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the libarchive archiving library is related to an operation exceeding buffer boundaries i...
CVE-2013-10057 Synactis PDF In-The-Box ConnectToSynactic Stack-Based Buffer Overflow
A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control PDFIN1.ocx, specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved...
PT-2025-32504 · Linksys · Linksys Re9000 +5
Name of the Vulnerable Software and Affected Versions: Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 versions up to 20250801 Description: A stack-based buffer overflow vulnerability exists in the um rp autochannel function within the /goform/RP setBasicAuto file of affected Linksys...
CVE-2025-48071
OpenEXR vulnerability CVE-2025-48071 is a heap-based buffer overflow in the EXR write/decompression path for ZIPS-packed deep scanline data when a forged chunk header causes the unpacked size to be inconsistent with the actual uncompressed data. The issue resides in OpenEXR’s chunk parsing and un...