1428 matches found
CVE-2022-1015
CVE-2022-1015 Root Cause In the nftparseregister function, because there is no validation when the arg defaults, an out-of-bounds OOB occurs on the stack of the nftdochain function. At this point, using the payload expression allows both read and write. The payload operates as follows: That is, b...
CVE-2020-1020
CVE-2020-1020 Windows Font Driver Type 1 VToHOrigin stack corruption only works on win7 x64...
CVE-2026-16671
splitimagecheck in boot/bootutil/src/loader.c declares a fixed uint8t loaderhash32 buffer and passes it as the outhash out-parameter to bootutilimgvalidate. That routine copies IMAGEHASHSIZE bytes into outhash memcpyouthash, hash, IMAGEHASHSIZE in boot/bootutil/src/imagevalidate.c, where...
EUVD-2026-124813
splitimagecheck in boot/bootutil/src/loader.c declares a fixed uint8t loaderhash32 buffer and passes it as the outhash out-parameter to bootutilimgvalidate. That routine copies IMAGEHASHSIZE bytes into outhash memcpyouthash, hash, IMAGEHASHSIZE in boot/bootutil/src/imagevalidate.c, where...
PT-2026-146114
split image check in boot/bootutil/src/loader.c declares a fixed uint8 t loader hash32 buffer and passes it as the out hash out-parameter to bootutil img validate. That routine copies IMAGE HASH SIZE bytes into out hash memcpyout hash, hash, IMAGE HASH SIZE in boot/bootutil/src/image validate.c,...
CVE-2026-114467
Out-of-bounds write possible in Git when git-merge1 used on tag with more than two GPG signatures...
TencentOS Server 3: tesseract (TSSA-2026:1431)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1431 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
EUVD-2026-120569
Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ectelnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a telnet stream with more backspaces than preceding characters to write...
CVE-2026-125406
Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ectelnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a telnet stream with more backspaces than preceding characters to write...
CVE-2026-125406: ettercap: Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in…
Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ectelnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a telnet stream with more backspaces than preceding characters to write...
CVE-2026-125406
Ettercap versions through 0.8.4.1 are susceptible to a stack buffer underwrite vulnerability within the telnet dissector located in src/dissectors/ec_telnet.c. The root cause is a lack of lower bound checking when the software decrements the output pointer upon encountering a backspace character....
CVE-2026-97371
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Detach sync cmd buffer on interrupted wait mwifiex synchronous commands keep the caller-provided data buffer in cmdnode-databuf. Several callers pass stack-allocated objects there. If waiteventinterruptibletimeout ...
UBUNTU-CVE-2026-97371
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...
AZL-112705 CVE-2026-97371 affecting package ntopng 5.2.1-8
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...
CVE-2026-97371
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...
CVE-2026-75614
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
EUVD-2026-117599
ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, BitStreamDecodeConstraintWholeNumber in asn1crt/asn1crtencoding.c reads enough bits for a constrained integer but does not reject values above the declared range when the encoded range is not a power of two. Generate...
EUVD-2026-117570
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...
NTOPNG buffer error vulnerability
Versions of ntopng prior to 6.7.260721 contain a buffer error vulnerability. This vulnerability arises because ndpigetcustomcategorymatch writes a four-byte value representing an NDPI protocol category into the IpAddress::reloadBlacklist function within src/IpAddress.cpp via a pointer to a two-by...