The vulnerability of the begfield() function in the sort component of the GNU Core Utilities system utilities allows a hacker to disclose protected information and cause a service failure.

The vulnerability of the begfield function in the sort component of the GNU Core Utilities set of system utilities is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose confidential information and cause...

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

SUSE CVE-2025-39691

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Comm...

The vulnerability of the SRBRoot::addTag() function in the Unicode-based library (ICU) allows a malicious actor to execute arbitrary code and cause service failure.

The vulnerability of the SRBRoot::addTag function in the Unicode-based ICU library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code and cause service failures...

The vulnerability of the Siemens User Management Component (UMC) in the web-based control system for technological processes of SIMATIC PCS neo allows a hacker to execute arbitrary code.

The vulnerability of the Siemens User Management Component UMC in the SIMATIC PCS neo industrial process control web system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the elf_gc_sweep() function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the elfgcsweep function in the GNU Binutils development environment is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the QoSSetup() function in the /goform/QoSSetup file of the Linksys E1700 router’s microprogramming system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the QoSSetup function in the /goform/QoSSetup microprogramming software for Linksys E1700 routers is related to the operation of writing data outside of the buffer in memory when processing the ackpolicy parameter. Exploiting this vulnerability allows a remote attacker to...

Advisory ROSA-SA-2025-2976

Software: rsync 3.4.1 OS: ROSA-CHROME unaffected versions = rsync-3.4.1-1 affected versions rsync-3.4.1-1 CVE-ID: CVE-2024-12084 BDU-ID: 2025-00378 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the rsyncd daemon of the Rsync file transfer and synchronization utility is related to an operation...

The vulnerability of the Drawing SDK, a software development tool for engineering applications, arises from the possibility of operations going beyond buffer boundaries in memory. This allows attackers to execute arbitrary code or cause system failures.

The vulnerability of the Drawing SDK, a software development tool for engineering applications, is related to the execution of operations beyond the buffer boundaries in memory when processing DWF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause servic...

The vulnerability of the IPerf3 tool for measuring network bandwidth measurement lies in the fact that the exit operation occurs beyond the memory buffer boundaries, allowing a hacker to execute arbitrary code.

The vulnerability of the IPerf3 tool for measuring network bandwidth is related to the execution of operations beyond the buffer memory limits. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the simulation application for complex systems, Simcenter Femap, related to the execution of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Simcenter Femap simulation application lies in the execution of operations beyond the buffer boundaries in memory when processing STP format files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2025-39691

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/buffer: fix use-after-free when call bhread helper There's issue as follows: BUG: KASAN: stack-out- of-bounds in endbufferreadsync+0xe3/0x110 Read of size 8...

usb: xhci: Fix isochronous Ring Underrun/Overrun event handling

...

The vulnerability of the sub_69064 function in the microprogrammed software of TP-Link’s TL-IPC544EP-W4 video cameras allows a intruder to trigger a service failure.

The vulnerability of the sub69064 function in TP-Link’s IP camera surveillance microprogramming software TP-Link TL-IPC544EP-W4 lies in the fact that the operation results are written outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service...

Linux Distros Unpatched Vulnerability : CVE-2020-7928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects...

The vulnerability of the SAPCAR file compression and decompression utility, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAPCAR file compression and decompression utility is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2023-24286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. CVE-2023-24286 Note that Ness...

Linux Distros Unpatched Vulnerability : CVE-2023-24283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service DoS via a...

Linux Distros Unpatched Vulnerability : CVE-2023-24288

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service DoS via creating an excessive amount of save states...

Linux Distros Unpatched Vulnerability : CVE-2023-24291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. CVE-2023-24291 Note that Nessus...