Lucene search
+L

220 matches found

Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•10 views

Siemens SIMATIC S7-1500 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2023-39615)

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support...

6.5CVSS6.7AI score0.00755EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
•added 2025/11/10 12:00 a.m.•11 views

The vulnerability of the web page rendering module in WebKit operating systems for iOS and iPadOS allows a hacker to trigger a service failure.

The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5CVSS7.1AI score0.01398EPSS
SaveExploits0References5Affected Software3
CVE
CVE
•added 2025/11/06 6:02 a.m.•50 views

CVE-2025-9338

The connected PT-Security advisory for PT-2025-45177 confirms a vulnerability in AsIO3.sys involving improper restriction of operations within a memory buffer, enabling local privilege escalation if a specially crafted process is executed. It identifies AsIO3.sys as the affected driver and notes ...

7.3CVSS6.3AI score0.00124EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•8 views

Astra Linux – Vulnerability in ntpsec

The vulnerability of the NTPsec network time protocol lies in reading data from buffers within acceptable limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

5.9CVSS5.9AI score
SaveExploits0References3
Redos
Redos
•added 2025/10/16 12:00 a.m.•22 views

ROS-20251016-04

Vulnerability of X509VERIFYPARAMadd0policy function of OpenSSL library is related to errors in the procedure of of certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely to perform a "man-in-the-middle" type of attack. remotely to perform a...

9.8CVSS7.7AI score0.87816EPSS
SaveExploits4
OSV
OSV
•added 2025/10/07 3:21 p.m.•11 views

CVE-2023-53676 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow The function liotargetnaclinfoshow uses sprintf in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With...

8.8CVSS6.9AI score
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2017-1455

Malware in sbrugna...

9.8CVSS9.5AI score0.02462EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/06 8:09 a.m.•13 views

CVE-2025-59730 Heap-buffer-overflow write in FFmpeg SANM decoding due to lack of bounds-checking in old_codec48

When decoding a frame for a SANM file ANIM v0 variant, the decoded data can be larger than the buffer allocated for it. Frames encoded with codec 48 can specify their resolution width x height. A buffer of appropriate size is allocated depending on the resolution. This codec can encode the frame...

5.7CVSS6.3AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2022-49205

Malicious code in bioql PyPI...

4.4CVSS4.5AI score0.00223EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-59930

Malicious code in bioql PyPI...

6.3AI score0.00157EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2025/09/28 12:00 a.m.•6 views

The vulnerability of the sch_ets.c component in the Linux operating system’s kernel allows a attacker to compromise data integrity.

The vulnerability of the schets.c component in the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise data integrity...

5.5CVSS7.1AI score0.00223EPSS
SaveExploits0References19Affected Software7
Vulnrichment
Vulnrichment
•added 2025/09/24 3:33 p.m.•11 views

CVE-2025-21483 Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

9.8CVSS6.7AI score0.004EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/16 4:12 p.m.•13 views

CVE-2023-53331 pstore/ram: Check start of empty przs during init

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a "pstore/ram: Do not treat empty buffers as valid", initialization would assume a prz was valid after seeing that the buffersize is zero regardless of the...

7.8CVSS5AI score
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2025/09/11 12:00 a.m.•13 views

RHEL 8 : kernel (RHSA-2025:15660)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15660 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ext4: use-after-free in...

7.8CVSS7.2AI score0.07804EPSS
SaveExploits9References16
BDU FSTEC
BDU FSTEC
•added 2025/09/10 12:00 a.m.•9 views

The vulnerability of the HashPeImageByType() function in the Tianocore EDK2 library, which allows a hacker to compromise the integrity and accessibility of protected information

The vulnerability of the HashPeImageByType function in the Tianocore EDK2 library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

4.6CVSS5.9AI score0.00214EPSS
SaveExploits0References7Affected Software4
Gitee
Gitee
•added 2025/09/06 12:30 a.m.•290 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Mac_Os_X

Mac&IOS HackStudy Mac&IOS安全学习资料汇总 Mac&IOS安全学习网站收集: http://samdmarshall.com https://www.exploit-db.com https://reverse.put.as http://highaltitudehacks.com/security/ http://www.dllhook.com/ http://www.securitylearn.net/archives/ http://securitycompass.github.io/iPhoneLabs/index.html...

9.3CVSS7.5AI score0.12671EPSS
SaveExploits13
BDU FSTEC
BDU FSTEC
•added 2025/09/05 12:00 a.m.•10 views

The vulnerability of the Despeckle Plugin component of the GIMP graphic editor, which arises from exceeding the buffer memory limit, allows attackers to trigger a system failure or execute arbitrary code.

The vulnerability of the Despeckle Plugin component of the GIMP graphic editor is related to the execution of code beyond the boundaries of the memory buffer. Exploiting this vulnerability can allow an attacker to cause a system failure or execute arbitrary code...

6.6CVSS7.6AI score0.00574EPSS
SaveExploits0References10Affected Software4
CNNVD
CNNVD
•added 2025/09/04 12:00 a.m.•6 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from fbdev not checking for registered frame buffer array out-of-bounds...

7.8CVSS6.2AI score0.00191EPSS
SaveExploits0References7
NVD
NVD
•added 2025/08/16 1:15 a.m.•18 views

CVE-2025-55286

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...

7.3CVSS0.00137EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/16 1:02 a.m.•15 views

CVE-2025-55286 z2d OOB drawing with new multi-sample anti-aliasing could lead to invalid memory access and corruption

z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...

7.3CVSS6.8AI score
SaveExploits0References5
Rows per page
Query Builder