The vulnerability of the get_link_hash_entry() function in the GNU Binutils development environment allows a hacker to gain enhanced privileges.

The vulnerability of the getlinkhashentry function in the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to increase their privileges...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49995)

tipc: vulnerability due to a potential buffer overrun when copying medianame and ifname to nameparts, which may be prevented by using strscpy to avoid overwriting the destination buffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

The vulnerability of the SAP CommonCryptoLib library, related to the execution of operations outside the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to the execution of operations outside the buffer in memory when processing ASN.1 data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49971)

drm/amd/display: dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, for example: hwdebug5 = &s-dummyboolean. Any assignment to hwdebug5 would cause an OVERRUN. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

The vulnerability of the mhi_process_cmd_completion() function in the drivers/bus/mhi/core/main.c module of the MHI bus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mhiprocesscmdcompletion function in the drivers/bus/mhi/core/main.c file of the MHI bus driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the arch_syncKernel_mappings() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the archsynckernelmappings function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The compatibility subsystem for running Linux applications, Windows Subsystem for Linux GUI (WSLg), has a vulnerability related to the execution of operations beyond the buffer in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the strscpy() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the strscpy function in the Linux operating system’s kernel is related to memory writing beyond the bounds of the allocated buffer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the batadv_nc_skb_decode_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Mozilla Firefox and Thunderbird browsers relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox and Thunderbird browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Off-by-one Error (CVE-2022-3821)

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. This plugin only works with Tenable.ot. Please visit...

The vulnerability of Mozilla Firefox’s JavaScript Engine component allows a hacker to execute arbitrary code.

The vulnerability of Mozilla Firefox’s JavaScript Engine component is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2023-34319)

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many piece...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check numvalidsets before accessing readerwmsets WHY & HOW numvalidsets needs to...

The vulnerability of the Transport Driver Interface (TDI) driver in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Transport Driver Interface TDI driver in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990844)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990844 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check msgid before processing transcation WHY & HOW HDCPMESSAGEIDINVALID -1 is n...

The vulnerability of the fuse_retrieve() function in the fs/fuse/dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fuseretrieve function in the fs/fuse/dev.c module of the Linux kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989875)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989875 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can no...