7175 matches found
CVE-2025-61983
Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 tmpserver modules allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet containing an excessive number of fields with zero‑length...
OPENSUSE-SU-2026:20167-1 Security update for xrdp
This update for xrdp fixes the following issues: Changes in xrdp: - CVE-2025-68670: Fixed a potential overflow bsc1257362...
The vulnerability of the function asymmetric_key_generate_id() in the crypto/asymmetric_keys/asymmetric_type.c module of the Linux kernel’s cryptographic subsystem allows a hacker to trigger a service failure.
The vulnerability of the asymmetrickeygenerateid function in the crypto/asymmetrickeys/asymmetrictype.c module of the Linux kernel’s cryptography subsystem is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service...
CVE-2026-24808 A possible integer overflow vulnerability in RawTherapee/RawTherapee
Integer Overflow or Wraparound vulnerability in RawTherapee rtengine modules. This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11...
PT-2026-4548
iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have a Heap Buffer Overflow vulnerability in CIccTagNamedColor2::SetSize. This occurs when user-controllable input is unsafely incorporated into ICC profi...
CVE-2026-23833
A flaw was found in ESPHome. An integer overflow vulnerability exists in the API component's protobuf decoder. A remote attacker can exploit this by sending a specially crafted, large fieldlength value, which bypasses a bounds check. This can lead to a denial-of-service DoS condition, causing the...
Debian dla-4445 : idle-python3.9 - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4445 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4445-1 [email protected]...
MiracleLinux 9 : transfig-3.2.7b-11.el9_7 (AXSA:2026-046:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-046:01 advisory. xfig: xfig: Stack-overflow allows possible code execution via local input manipulation CVE-2025-46397 Tenable has extracted the preceding description block...
MiracleLinux 9 : libX11-1.7.0-8.el9 (AXSA:2023-6905:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6905:01 advisory. libX11: InitExt.c can overwrite unintended portions of the Display structure if the extension request leads to a buffer overflow CVE-2023-3138 Tenable has...
Canon’s various products have security vulnerabilities
Canon ImageRunner is a product of the Japanese company Canon. Canon ImageRunner is a series of all-in-one black-and-white printers. Canon Color imageCLASS is a series of printers. Canon Satera is also a series of printers. Several Canon products have security vulnerabilities; these vulnerabilitie...
MiracleLinux 3 : glibc-2.5-107.4.0.1.AXS3 (AXSA:2013-422:02)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-422:02 advisory. The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as t...
PT-2026-3280
Name of the Vulnerable Software and Affected Versions iDailyDiary version 4.30 Description The application can be crashed due to a denial of service condition. This occurs when an attacker overflows the preferences tab name field with a large input, specifically a 2,000,000 character buffer. This...
CVE-2025-70304
A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002076)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002076 advisory. Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 allow local users to cause a denial of servic...
MiracleLinux 3 : perl-DBD-Pg-1.49-2AXS3.1 (AXSA:2009-57:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2009-57:01 advisory. An implementation of DBI for PostgreSQL for Perl. Fixed bugs: CVE-2009-0663 Heap-based buffer overflow in the DBD::Pg aka DBD-Pg or libdbd-pg-perl...
CVE-2026-22791
openCryptoki is a PKCS11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKMECDHAESKEYWRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key...
Tenda AX-3 安全漏洞
Tenda AX-3 is a home smart wireless router from Tenda that supports Wi-Fi6 802.11ax standard for home networking environment. The Tenda AX-3 suffers from a stack buffer overflow vulnerability, which stems from the mac2 parameter in the fromAdvSetMacMtuWan function failing to correctly validate th...
CVE-2005-1812
Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long 1 filename or 2 transfer mode string in a Read Request RRQ or Write Request WRQ packet...