EUVD-2026-42605

Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mgtlsserverrecvhello, which uses an attacker-controlled sessionidlen byte from a TLS ClientHello as a buffer index without validating it against the length of received data. A remote, unauthenticated...

CVE-2026-10629

SIP signaling stack in Verizon IMS unspecified version implements SIP signaling without IPsec integrity protection missing Security-Client/Security-Server headers and ESP traffic, which allows an on-path attacker to compromise confidentiality, integrity, and authenticity of VoLTE signaling via...

CVE-2026-27661

CVE-2026-27661 affects Siemens SINEC Security Monitor (all versions < V4.9.0). The vulnerability causes information disclosure by leaking confidential data in metadata and files such as contributor information and email addresses on the SSM Server. Connected advisories from Red Hat, ENISA ENIS...

EUVD-2000-0578

Malware in sbrugna...

EUVD-2012-5852

Malware in sbrugna...

CVE-2023-43760

Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, WithSecure Elements Endpoint Protection 17 and later, WithSecure Client Security for Mac 15, WithSecure...

CVE-2022-23805

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

FreeBSD-SA-25:05.openssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:05.openssh Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSH Category: contrib Module: openssh Announced: 2025-02-21 Credits:...

com.canoo.dolphin-platform:dolphin-platform-security-server (>=0.19.0, <=1.0.0.cr3), com.canoo.dolphin-platform:dolphin-platform-security-server-javaee (>=0.19.0, <=1.0.0.cr3) +61 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (3.0.0.final)

org.keycloak:keycloak-core MAVEN version 3.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-security-server =0.19.0, =0.19.0, =0.19.0, =1.0.0.cr3 -...

Omnivise T3000 Disclosure Privilege

The vulnerabilities of the Omnivise T3000 Application Server, Omnivise T3000 Domain Controller, Omnivise T3000 Network Intrusion Detection System NIDS, Omnivise T3000 Product Data Management PDM, Omnivise T3000 Security Server, Omnivise T3000 Terminal Server, Omnivise T3000 Thin Client, and...

Path Traversal - Archiving Files to Zip

Description The Tiny File Manager pack files feature is vulnerable to path traversal, which allows an attacker to access files that reside outside the web document root directory. The vulnerability occurs as the "file" parameter is not sanitized properly, thus allowing a malicious user to input...

CVE-2022-23805

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

Information disclosure

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

CVE-2022-23805: Out-of-bounds Read

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server could allow a local attacker to send garbage data to a specific named pipe and crash the server. Please note: an attacker must first obtain the ability to execute low-privileged...

PT-2022-16277

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security Server affected versions not specified Description A security out-of-bounds read information disclosure issue could allow a local attacker to send garbage data to a specific named pipe and crash the...

Security Server RCE

The vulnerability of the Security Server component in the Worry-Free Business Security antivirus solution is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Security Server Code Execution

The vulnerability of the Security Server component of the antivirus protection system, Worry-Free Business Security, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges and execute arbitrary code...

Security Server Code Execution

The vulnerability of the Security Server component of the antivirus protection system, Worry-Free Business Security, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges and execute arbitrary code...

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Trend Micro Worry-Free Business Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...