211896 matches found
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution.
A flaw was found in Capstone, a disassembly framework. A local attacker could exploit a heap buffer overflow vulnerability by providing a specially crafted skipdata callback. This flaw occurs because the skipdata length is not properly bounds-checked, which may allow an attacker to write beyond...
capstone: Capstone: Heap buffer overflow via skipdata callback allows denial of service or arbitrary code execution.
A flaw was found in Capstone, a disassembly framework. A local attacker could exploit a heap buffer overflow vulnerability by providing a specially crafted skipdata callback. This flaw occurs because the skipdata length is not properly bounds-checked, which may allow an attacker to write beyond...
USN-8105-2: FreeRDP regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attack...
USN-8105-2 freerdp3 regression
USN-8105-1 fixed vulnerabilities in FreeRDP. The update introduced a regression which could cause FreeRDP to crash. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attack...
CVE-2025-71260
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that allows authenticated attackers to execute arbitrary code. Attackers can supply crafted serialized objects to the VIEWSTATE paramete...
gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability
A flaw was found in GIMP. A remote attacker can exploit this out-of-bounds write vulnerability by tricking a user into opening a specially crafted XWD X Window Dump file. This issue occurs due to improper validation of user-supplied data during XWD file parsing, leading to a write past the end of...
D-Link DIR-816 goform/form2Wl5BasicSetup.cgi file buffer overflow vulnerability
The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 has a buffer overflow vulnerability in its goform/form2Wl5BasicSetup.cgi file. Attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial-of-service attack...
ROS-20260319-73-0001
A vulnerability in the Gimp image processing library is related to writing beyond buffer boundaries. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Vim vulnerabilities (USN-8101-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8101-1 advisory. Rahul Hoysala discovered that Vim did not correctly handle certain tag resolutions. A...
CVE-2026-30694
CVE-2026-30694 affects DedeCMS up to v5.7.118 (and earlier). The issue is a vulnerability in the array_filter component that could allow a remote attacker to execute arbitrary code. The CVE’s metrics indicate a high-impact, remote, no-auth Exploit with a 9.8 AV/AC/PR/UI/S/C/I/A profile. Connected...
KLA90947 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-32194 CVE-2026-32191 Exploitation Public exploits exist for this vulnerability. Related products...
PT-2026-26428
Name of the Vulnerable Software and Affected Versions ingress-nginx versions prior to v1.13.9, v1.14.5, and v1.15.1 Description A security issue exists in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx. This can lead to arbitrary code...
ROS-20260319-73-0035
Vulnerability in vim related to buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
D-Link DIR-619L has a buffer overflow vulnerability related to the goform/formSchedule file handling.
The D-Link DIR-619L is a wireless router produced by D-Link Corporation. The D-Link DIR-619L has a buffer overflow vulnerability in its goform/formSchedule files. Attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...
ROS-20260319-73-0013
Vulnerability in glpi due to failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
RHEL 9 : capstone (RHSA-2026:5125)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:5125 advisory. Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security...
D-Link DIR-816 goform/form2WlanBasicSetup.cgi file buffer overflow vulnerability
The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 has a buffer overflow vulnerability in its goform/form2WlanBasicSetup.cgi file. Attackers can exploit this vulnerability to execute arbitrary code on the system or cause a denial-of-service attack...
D-Link DIR-816 goform/form2Wl5RepeaterStep2.cgi file buffer overflow vulnerability
The D-Link DIR-816 is a wireless router produced by D-Link Corporation. The D-Link DIR-816 has a buffer overflow vulnerability in its goform/form2Wl5RepeaterStep2.cgi file. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...
Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2026-14686)
The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability, which originates from a misbehavior of the webpage parameter of the function formReboot in the file /goform/formReboot, that can be exploited by an attacker to execute arbitrary co...