The vulnerability of Adobe Illustrator, related to writing beyond the buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the dmaengine kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the dmaengine component in the Linux operating system’s kernel is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the sixeldebug_print_palette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeldebugprintpalette function in the src/encoder.c file of the SIXEL Libsixel encoder/decoder implementation is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the...

The vulnerability of the drivers AcpiS3SaveDxe and ChipsetSvcDxe, which are part of the InsydeH2O UEFI firmware creation framework, allows a hacker to execute arbitrary code.

The vulnerability of the AcpiS3SaveDxe and ChipsetSvcDxe drivers in the InsydeH2O UEFI firmware framework is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20251202-08

Vulnerability in the Dawn component of Google Chrome browser is related to writing beyond buffer boundaries. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to affect the accessibility of protected information...

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark artificial intelligence systems allows a hacker to replace data, cause system failures, or gain increased privileges.

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to replace data, cause system failures, or gain increase...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s chips, allows attackers to enhance their privileges.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the DA component in Microprogramming Software, MediaTek’s chips, allows attackers to enhance their privileges.

The vulnerability of the DA component of MediaTek’s microprogramming software lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system allows a hacker to trigger a service failure.

The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system for DGX Spark AI systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ldap.responsions.attribute_type` component in the Suricata intrusion detection and prevention system allows a perpetrator to trigger a service failure.

The vulnerability of the ldap.responsions.attributetype component in the Suricata intrusion detection and prevention system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Completions API component in the LLM library vLLM allows a attacker to trigger a service failure and execute arbitrary code.

The vulnerability of the Completions API component in the vLLM language model processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

The vulnerability of the web server for HTTP Easy File Sharing HTTP Server arises from the occurrence of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Easy File Sharing server relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TencentOS Server 3: mysql:8.0 (TSSA-2024:0079)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0079 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-2505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fsl-cpm driver within the Linux kernel related to handling transfer sizes during SPI communication. A commit intended to optimize large transfers by switching to...

Shelly Pro 3EM 缓冲区错误漏洞

Shelly Pro 3EM is a three-phase energy meter from Shelly USA. A buffer error vulnerability exists in Shelly Pro 3EM versions prior to 1.4.4, which stems from an out-of-bounds read that could result in an over-read of the buffer...

The vulnerability of the get_link_hash_entry() function in the GNU Binutils development environment allows a hacker to gain enhanced privileges.

The vulnerability of the getlinkhashentry function in the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the SAP CommonCryptoLib library, related to the execution of operations outside the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to the execution of operations outside the buffer in memory when processing ASN.1 data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49995)

tipc: vulnerability due to a potential buffer overrun when copying medianame and ifname to nameparts, which may be prevented by using strscpy to avoid overwriting the destination buffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49971)

drm/amd/display: dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, for example: hwdebug5 = &s-dummyboolean. Any assignment to hwdebug5 would cause an OVERRUN. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

The vulnerability of the mhi_process_cmd_completion() function in the drivers/bus/mhi/core/main.c module of the MHI bus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mhiprocesscmdcompletion function in the drivers/bus/mhi/core/main.c file of the MHI bus driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servi...