38085 matches found
RLSA-2025:22417 Important: gimp:2.8 security update
The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP DCM...
CVE-2025-64657
Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network...
CIRCUTOR SGE-PLC1000和CIRCUTOR SGE-PLC50 安全漏洞
The CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 are both a network concentrator from CIRCUTOR Spain. A security vulnerability exists in the CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 v9.0.2, which stems from the ShowMeterDatabase function not validating the length of the meter parameter, which...
PT-2025-48673
Name of the Vulnerable Software and Affected Versions Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2 Description A stack-based buffer overflow exists in the AddEvent function when handling user-supplied usernames. The issue occurs because the function copies the username input to a fixed-size buffe...
CIRCUTOR SGE-PLC1000和CIRCUTOR SGE-PLC50 安全漏洞
The CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 are both a network concentrator from CIRCUTOR Spain. A security vulnerability exists in the CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 v9.0.2, which stems from the showMeterReport function not validating the length of the meter parameter, which cou...
CIRCUTOR SGE-PLC1000和CIRCUTOR SGE-PLC50 安全漏洞
The CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 are both a network concentrator from CIRCUTOR Spain. A security vulnerability exists in the CIRCUTOR SGE-PLC1000 and CIRCUTOR SGE-PLC50 version v9.0.2, which stems from the ShowDownload function not validating the length of the meter parameter, whic...
openSUSE 16 Security Update : redis (openSUSE-SU-2025:20121-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20121-1 advisory. - Updated to 8.2.3 boo1252996 CVE-2025-62507 https://github.com/redis/redis/releases/tag/8.2.3 - Security fixes - CVE-2025-62507 Bug in XACKDEL...
CVE-2025-59789 Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
CVE-2025-59789
Apache bRPC versions prior to 1.15.0 are vulnerable to a stack overflow caused by uncontrolled recursion in the json2pb component. The root cause is that the underlying rapidjson parser uses a recursive method by default; providing deeply nested recursive JSON data can exhaust the stack and crash...
qtsvg: Uncontrolled recursion in Qt SVG module
A stack overflow flaw has been discovered in the Qt SVG module. When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...
qtsvg: Uncontrolled recursion in Qt SVG module
A stack overflow flaw has been discovered in the Qt SVG module. When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...
Linux Distros Unpatched Vulnerability : CVE-2025-64331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 an...
Linux Distros Unpatched Vulnerability : CVE-2025-64332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 an...
The vulnerability of the get_merge_mac() function in Linksys E1200 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the getmergemac function in Linksys E1200 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
The vulnerabilities of the get_mac_from_ip() and get_ip_from_mac() functions in the Linksys E1200 router’s microprogramming software allow a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the getmacfromip and getipfrommac functions in Linksys E1200 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the SetSysTimeCfg() function in the Tenda AX1803 router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the SetSysTimeCfg function in the Tenda AX1803 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2025-59789: Uncontrolled Recursion
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
The vulnerability of the sub_401EE0() function in TOTOLINK A720R router microprogramming software allows a intruder to execute arbitrary code.
The vulnerability of the sub401EE0 function in TOTOLINK A720R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the `apply_cgi()` and `block_cgi()` functions in the Linksys E1200 router’s microprogramming software allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the applycgi and blockcgi functions in the Linksys E1200 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2025-64344
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 an...