5995 matches found
UBUNTU-CVE-2023-54203
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in initsmb2rsphdr When smb1 mount fails, KASAN detect slab-out-of-bounds in initsmb2rsphdr like the following one. For smb1 negotiate56bytes , initsmb2rsphdr for smb2 is called. The issue occurs whil...
The vulnerability of Tenda WH450 router microprogramming software, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of Tenda WH450 router microprogramming software is related to the execution of an operation beyond the buffer in memory when processing the parameter ssidindex for the destination point /goform/onSSIDChange. Exploiting this vulnerability allows a remote attacker to execute...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992700)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992700 advisory. In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current limits Fix set charge current limits for...
The vulnerability of the Mozilla Firefox browser and the Thunderbird email client, related to writing beyond the buffer limit, allows attackers to execute arbitrary code.
The vulnerability of Mozilla Firefox browser and Thunderbird email client lies in the issue of buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers allows a hacker to execute arbitrary code or cause a service failure due to incorrect HTTP requests.
The vulnerability of the strcpy function in the microprogramming software for Tenda AC18 routers is related to the operation that goes beyond the buffer boundaries in memory when processing the mac argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause...
SUSE CVE-2023-54054
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CLSA-2025-1766601879 gnutls: Fix of CVE-2025-32989
CVE-2025-32989: fix read buffer overrun in x509 SCT timestamps...
EUVD-2023-60272
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...
CVE-2023-54054
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-54054
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2023-54054 scsi: qla2xxx: Fix buffer overrun
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix buffer overrun Klocwork warning: Buffer Overflow - Array Index Out of Bounds Driver uses fcelsflogi to calculate size of buffer. The actual buffer is nested inside of fcelsflogi which is smaller. Replace...
CVE-2023-54054
CVE-2023-54054 pertains to the Linux kernel SCSI qla2xxx driver, where a buffer overrun occurred in the handling of fc_els_flogi, leading to an incorrect buffer size calculation. Multiple connected sources (OSV entries for Debian, Ubuntu, and general OSV) report that the vulnerability has been re...
The vulnerability of the IBM InfoSphere Data Replication software configuration lies in the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the IBM InfoSphere Data Replication software configuration relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a shift overrun in the truesectorsperclst function, which could lead to undefined behavior...
PT-2025-53052
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the qla2xxx SCSI driver that can lead to a buffer overrun. The issue stems from an incorrect buffer size calculation during the use of the fc els...
CVE-2025-14409
Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...
The vulnerability of the TEE SOC microprogramming software driver for AMD processors allows a hacker to trigger a service failure.
The vulnerability of the TEE SOC microprogramming software driver for AMD processors is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of AMD’s microprogramming software related to writing beyond buffer boundaries in memory allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of AMD’s microprogramming software lies in writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2025-14964 TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow
A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from remote...