23354 matches found
EUVD-2025-38150
An issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients...
Prototype Pollution
@messageformat/runtime is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of nested message keys during message data processing, which allows an attacker to inject arbitrary properties into the Object prototype and cause denial of service or unexpected...
Tenda CH22 Router Code Execution
The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the Tenda CH22 router software lies in the fact that the operation is executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990496)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990496 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...
CMSimple_XH 安全漏洞
CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, for...
AnyDesk 输入验证错误漏洞
AnyDesk is a remote desktop connection software from the German company AnyDesk. A security vulnerability exists in AnyDesk versions prior to 9.0.0 that stems from an integer overflow and heap buffer overflow in UDP packets when processing Identity user images in the Discovery feature or...
CVE-2025-27918
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...
PT-2025-45627
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
EUVD-2025-37893
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS...
CVE-2025-54334
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the npuvertexbootup function...
CVE-2025-47353
Memory corruption while processing request sent from GVM...
CVE-2025-47368
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-47367
Memory corruption while accessing a buffer during IOCTL processing...
CVE-2025-52910
An issue was discovered in the GPU in Samsung Mobile Processor and Wearable Processor Exynos 1280, 2200, 1330, 1380, 1480, 2400. A Use-After-Free leads to privilege escalation...
CVE-2025-54330
An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Out-of-bounds Read of q-bufs in the isdoneforme function...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989731)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989731 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound In line 5001, if...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988961)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988961 advisory. In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Fix potential VPE leak on error In itsvpeirqdomainalloc, when itsvpeinit...
Cisco Identity Services Engine (cisco-sa-ise-radsupress-dos-8YF3JThh)
According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart...
