The vulnerability of the drivers AcpiS3SaveDxe and ChipsetSvcDxe, which are part of the InsydeH2O UEFI firmware creation framework, allows a hacker to execute arbitrary code.

The vulnerability of the AcpiS3SaveDxe and ChipsetSvcDxe drivers in the InsydeH2O UEFI firmware framework is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20251202-08

Vulnerability in the Dawn component of Google Chrome browser is related to writing beyond buffer boundaries. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to affect the accessibility of protected information...

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark artificial intelligence systems allows a hacker to replace data, cause system failures, or gain increased privileges.

The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark AI systems involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to replace data, cause system failures, or gain increase...

The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system allows a hacker to trigger a service failure.

The vulnerability of the OROOT component of the NVIDIA DGX OS workstation operating system for DGX Spark AI systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ldap.responsions.attribute_type` component in the Suricata intrusion detection and prevention system allows a perpetrator to trigger a service failure.

The vulnerability of the ldap.responsions.attributetype component in the Suricata intrusion detection and prevention system is related to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

The vulnerability of the Completions API component in the LLM library vLLM allows a attacker to trigger a service failure and execute arbitrary code.

The vulnerability of the Completions API component in the vLLM language model processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

The vulnerability of the web server for HTTP Easy File Sharing HTTP Server arises from the occurrence of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Easy File Sharing server relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TencentOS Server 3: mysql:8.0 (TSSA-2024:0079)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0079 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-2505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fsl-cpm driver within the Linux kernel related to handling transfer sizes during SPI communication. A commit intended to optimize large transfers by switching to...

The vulnerability of the get_link_hash_entry() function in the GNU Binutils development environment allows a hacker to gain enhanced privileges.

The vulnerability of the getlinkhashentry function in the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to increase their privileges...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49995)

tipc: vulnerability due to a potential buffer overrun when copying medianame and ifname to nameparts, which may be prevented by using strscpy to avoid overwriting the destination buffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

The vulnerability of the SAP CommonCryptoLib library, related to the execution of operations outside the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to the execution of operations outside the buffer in memory when processing ASN.1 data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49971)

drm/amd/display: dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, for example: hwdebug5 = &s-dummyboolean. Any assignment to hwdebug5 would cause an OVERRUN. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

The vulnerability of the mhi_process_cmd_completion() function in the drivers/bus/mhi/core/main.c module of the MHI bus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mhiprocesscmdcompletion function in the drivers/bus/mhi/core/main.c file of the MHI bus driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the batadv_nc_skb_decode_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The compatibility subsystem for running Linux applications, Windows Subsystem for Linux GUI (WSLg), has a vulnerability related to the execution of operations beyond the buffer in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox and Thunderbird browsers relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox and Thunderbird browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Off-by-one Error (CVE-2022-3821)

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2023-34319)

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many piece...

The vulnerability of the Transport Driver Interface (TDI) driver in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Transport Driver Interface TDI driver in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...