The vulnerability of the Completions API component in the LLM library vLLM allows a attacker to trigger a service failure and execute arbitrary code.

The vulnerability of the Completions API component in the vLLM language model processing library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure and execute arbitrary code...

The vulnerability of the web server for HTTP Easy File Sharing HTTP Server arises from the occurrence of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the HTTP Easy File Sharing server relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TencentOS Server 3: mysql:8.0 (TSSA-2024:0079)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0079 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

PT-2026-2505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the fsl-cpm driver within the Linux kernel related to handling transfer sizes during SPI communication. A commit intended to optimize large transfers by switching to...

The vulnerability of the get_link_hash_entry() function in the GNU Binutils development environment allows a hacker to gain enhanced privileges.

The vulnerability of the getlinkhashentry function in the GNU Binutils development environment is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to increase their privileges...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49995)

tipc: vulnerability due to a potential buffer overrun when copying medianame and ifname to nameparts, which may be prevented by using strscpy to avoid overwriting the destination buffer. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

The vulnerability of the SAP CommonCryptoLib library, related to the execution of operations outside the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the SAP CommonCryptoLib library is related to the execution of operations outside the buffer in memory when processing ASN.1 data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-49971)

drm/amd/display: dml2coresharedmodesupport and dmlcoremodesupport access the third element of dummyboolean, for example: hwdebug5 = &s-dummyboolean. Any assignment to hwdebug5 would cause an OVERRUN. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

The vulnerability of the mhi_process_cmd_completion() function in the drivers/bus/mhi/core/main.c module of the MHI bus driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mhiprocesscmdcompletion function in the drivers/bus/mhi/core/main.c file of the MHI bus driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a servi...

The vulnerability of the batadv_nc_skb_decode_packet() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

The compatibility subsystem for running Linux applications, Windows Subsystem for Linux GUI (WSLg), has a vulnerability related to the execution of operations beyond the buffer in memory. This allows an attacker to execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Mozilla Firefox and Thunderbird browsers relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox and Thunderbird browsers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Siemens SIMATIC S7-1500 Off-by-one Error (CVE-2022-3821)

An off-by-one Error issue was discovered in Systemd in formattimespan function of time-util.c. An attacker could supply specific values for time and accuracy that leads to buffer overrun in formattimespan, leading to a Denial of Service. This plugin only works with Tenable.ot. Please visit...

Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2023-34319)

The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in one piece. Unfortunately the logic introduced there didn't account for the extreme case of the entire packet being split into as many piece...

The vulnerability of the Transport Driver Interface (TDI) driver in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Transport Driver Interface TDI driver in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the fuse_retrieve() function in the fs/fuse/dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fuseretrieve function in the fs/fuse/dev.c module of the Linux kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

The vulnerability of the Substance 3D Viewer application, which allows the execution of arbitrary code, arises from the possibility of operations going beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Viewer application for viewing and editing 3D files is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted maliciou...

The vulnerability of the Media components in Google Chrome and Microsoft Edge allows attackers to enhance their privileges.

The vulnerability of the Media components in Google Chrome and Microsoft Edge is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ROS-20251031-02

A vulnerability in the nvJPEG library of the NVIDIA CUDA Toolkit, a software tool for parallel computing on graphics processors, is related to buffer overruns. The NVIDIA CUDA Toolkit GPU parallel computing software nvJPEG library vulnerability is related to writing outside buffer boundaries...