4283 matches found
CVE-2025-2914: Heap-based Buffer Overflow
A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FSsinfoSrializeSctcb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has...
CVE-2025-2923: Heap-based Buffer Overflow
A vulnerability, which was classified as problematic, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5Faddrencodelen of the file src/H5Fint.c. The manipulation of the argument pp leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has...
CVE-2025-2912: Heap-based Buffer Overflow
A vulnerability was found in HDF5 up to 1.14.6. It has been declared as problematic. Affected by this vulnerability is the function H5Omsgflush of the file src/H5Omessage.c. The manipulation of the argument oh leads to heap-based buffer overflow. The attack needs to be approached locally. The...
CVE-2025-1439
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
CVE-2025-1439: Improper Neutralization of Input During Web Page Generation
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
Open Asset Import Library（assimp） 缓冲区错误漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter src.entries can lead to out-of-bounds reads...
CVE-2025-2690: Deserialization of Untrusted Data
A vulnerability, which was classified as critical, was found in yiisoft Yii2 up to 2.0.39. This affects the function Generate of the file phpunit\src\Framework\MockObject\MockClass.php. The manipulation leads to deserialization. It is possible to initiate the attack remotely. The exploit has been...
Security update for zvbi
This update for zvbi fixes the following issues: CVE-2025-2173: Fixed check on srclength to avoid an unitinialized heap read bsc1239222. CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c bsc1239299. CVE-2025-2175: Fixed integer overflow in...
UBUNTU-CVE-2025-2588
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...
CVE-2025-2588
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
PT-2025-12406
Name of the Vulnerable Software and Affected Versions WebAssembly wabt version 1.0.36 Description A critical vulnerability was found in WebAssembly wabt, affecting the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation lea...
CVE-2025-2588: NULL Pointer Dereference
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
PT-2025-11707
Name of the Vulnerable Software and Affected Versions Tenda AC8 version 16.03.34.06 Description A stack overflow issue was discovered in Tenda AC8 via the src parameter in the function sub 47D878. This issue allows for a potential buffer overflow attack. Recommendations For Tenda AC8 version...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
The Tenda AC8 wireless router (version 16.03.34.06 ) is susceptible to a stack-based buffer overflow vulnerability within the sub_47D878 function. The root cause is the failure of the src parameter to correctly validate the length of the input data size. This flaw could allow an attacker to cause...
