4671 matches found
CVE-2026-23568 Out-of-bounds read vulnerability in Content Distribution Service
An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows an attacker on the adjacent network to cause information disclosure or denial-of-service via a special crafted packet. The leaked...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001025)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001025 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003619)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003619 advisory. The Linux kernel before 4.8 allows local users to bypass ASLR on setuid programs such as /bin/su because installexeccreds is called too late in loadelfbinary in...
MiracleLinux 3 : kernel-2.6.18-348.6.AXS3 (AXSA:2013-580:06)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-580:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
CVE-2025-67246
A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver exposes a device interface accessible to a normal user and handles attacker-controlled structures containing the lower 4GB of physical addresse...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002649)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002649 advisory. The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier fo...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002278)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002278 advisory. kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001942)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001942 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001919)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001919 advisory. kernel/trace/tracesyscalls.c in the Linux kernel through 3.17.2 does not properly handle private syscall numbers during use of the perf subsystem, which allows local...
CVE-2024-34658
Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR...
Malware-Analysis-Project-SLMAIL-5.5-BOF-
Malware Analysis Project Introduction to exploit development w...
Mozilla Firefox ESR < 45.7
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 45.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-02 advisory. - A use-after-free vulnerability in the Media Decoder when working with media files when some events are...
Mozilla Thunderbird < 45.7
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 45.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-03 advisory. - A use-after-free vulnerability in the Media Decoder when working with media files when some events are...
Siemens SIMATIC S7-1500 Exposure of Sensitive Information to an Unauthorized Actor (CVE-2019-1010024)
DISPUTED GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may bypass ASLR using cache of thread stack and heap. The component is: glibc. NOTE: Upstream comments indicate this is being treated as a non-security bug and no real threat. This plugin only works with...
Siemens SIMATIC S7-1500 Use of Insufficiently Random Values (CVE-2019-1010025)
DISPUTED GNU Libc current is affected by: Mitigation bypass. The impact is: Attacker may guess the heap addresses of pthreadcreated thread. The component is: glibc. NOTE: the vendor's position is ASLR bypass itself is not a vulnerability. This plugin only works with Tenable.ot. Please visit...
EUVD-2025-106791
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR...
CVE-2025-43205
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in watchOS 11.4, tvOS 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4. An app may be able to bypass ASLR...
Apple多款产品 安全漏洞
Apple tvOS and others are products of Apple Inc.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple visionOS is an operating system for AR glasses. A security vulnerability exists in several Apple products, which stems from an out-of-bounds access issue...