Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a possible out-of-page table boundary access during bulk unmapping...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

NewStart CGSL MAIN 7.02 : libX11 Multiple Vulnerabilities (NS-SA-2025-0138)

The remote NewStart CGSL host, running version MAIN 7.02, has libX11 packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in libX11 due to an integer overflow within the XCreateImage function. This flaw allows a local user to trigger an integer overflow an...

IBM Engineering Systems Design Rhapsody Stack Buffer Overflow Vulnerability (CNVD-2026-07119)

IBM Engineering Systems Design Rhapsody is a model-driven development MDD environment for systems engineering and software development provided by IBM. IBM Engineering Systems Design Rhapsody suffers from a stack buffer overflow vulnerability that stems from the program not properly checking...

IBM Engineering Systems Design Rhapsody Stack Buffer Overflow Vulnerability

IBM Engineering Systems Design Rhapsody is a model-driven development MDD environment for systems engineering and software development provided by IBM. IBM Engineering Systems Design Rhapsody suffers from a stack buffer overflow vulnerability that stems from the program not properly checking...

CLSA-2025-1753298962 kernel: Fix of 13 CVEs

udf: Fix a slab-out-of-bounds write bug in udffindentry CVE-2022-49846 - net: atm: fix use after free in lecsend CVE-2025-22004 - ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup CVE-2025-21887 - rcutorture: Fix ksoftirqd boosting timing and iteration CVE-2022-50177 - tty: ngsm:...

NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW 2025 Q1 and prior versions that stems from improper boundary checking and could lead to information disclosure or execution of arbitrary...

NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW 2025 Q1 and prior versions that stems from improper boundary checking and could lead to information disclosure or execution of arbitrary...

form-data Insufficient Randomness

form-data uses Math.random to select a boundary value for multipart form-encoded data. This can lead to a security issue if an attacker can observe other values produced by Math.random in the target application and can control one field of a request made using form-data...

The vulnerability of the smb_extract_folioq_to_rdma() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the smbextractfolioqtordma function in the Linux operating system is related to the violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-33784

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the ARM64 BPF JIT related to frame pointer FP initialization for exception boundaries. Specifically, when a BPF program acts as an exception boundar...

GHSA-FJXV-7RQG-78G4 form-data uses unsafe random function in form-data for choosing boundary

Summary form-data uses Math.random to select a boundary value for multipart form-encoded data. This can lead to a security issue if an attacker: 1. can observe other values produced by Math.random in the target application, and 2. can control one field of a request made using form-data Because th...

The vulnerability of the Microsoft Visual Studio Code Python Extension, related to breach of confidentiality boundaries, allows the attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio Code Python Extension is related to a breach of trust boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Fuji Electric V-SFT/TELLUS Buffer Overflow Vulnerability

Fuji Electric TELLUS and Fuji Electric V-SFT are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced functionality, user-friendliness and remote control.Fuji Electric V-SFT is a screen configuration software. Fuji Electric V-SFT and Fuji Electric TELL...

Microsoft Office Code Execution Vulnerability (CNVD-2025-16688)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. A code execution vulnerability exists in Microsoft Office, which is caused due to improper boundary checkin...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Predictable Value Range from Previous Values

Overview Affected versions of this package are vulnerable to Predictable Value Range from Previous Values via the boundary value, which uses Math.random. An attacker can manipulate HTTP request boundaries by exploiting predictable values, potentially leading to HTTP parameter pollution. Remediati...

ROS-20250718-01

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to incorrect optimization, where JIT compilation created incorrect code in certain cases. optimization, in which JIT-compilation in certain cases created incorrect code for arguments. arguments. Exploitation...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-50200: selinux: Add boundary check in putentry bsc1245149. Special Instructions and Notes: Please reboot the system after installing this update. Patch...

Flexense DiskBoss Enterprise 安全漏洞

Flexense DiskBoss Enterprise is a file management tool from Flexense. A security vulnerability exists in Flexense DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14, which stems from improper boundary checking of the HTTP GET request path component, which could result in a stack buffer...