4661 matches found
The vulnerability of the nfs_readreply function in the net/nfs.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability of the nfsreadreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the driver/usb/gadget/f_dfu.c component of the U-Boot loader allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.
The vulnerability in the driver/usb/gadget/fdfu.c file of the U-Boot loader is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause system failures...
The vulnerability of the nfs_readlink_reply function in the net/nfs.c component of the U-Boot loader allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the nfsreadlinkreply function in the net/nfs.c component of the U-Boot loader is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the sound/soc/codecs/wcd937x.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the sound/soc/codecs/wcd937x.cx module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
CVE-2025-10920
GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open...
The vulnerability of the DB2 IBM DB2 High Performance Unload (Db2 HPU) table unloading utility, related to writing beyond buffer boundaries in memory, allows a malicious actor to cause a service failure.
The vulnerability of the DB2 IBM DB2 High Performance Unload Db2 HPU table unloading utility is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service interruptions...
The vulnerability of the SetValue() and GetValue() functions (/goform/AdvSetLanip) of the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the SetValue and GetValue functions /goform/AdvSetLanip of the Tenda O3 wireless access point software lies in the fact that the operation goes beyond the buffer in memory when processing the macList parameter. Exploiting this vulnerability allows a remote attacker to execute...
Advisory ROSA-SA-2025-3040
Software: gnutls 3.6.16 OS: ROSA Virtualization 2.1 unaffected versions = gnutls-3.6.16-8.0.1.rv3.4 affected versions gnutls-3.6.16-8.0.1.1.rv3.4 CVE-ID: CVE-2024-12243 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in GnuTLS when processing ASN.1 data via libtasn1 could result in...
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26659)
xhci: isoc Babble and Buffer Overrun events are not handled properly. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503655; scriptversion"1.2";...
The vulnerability of the iGC component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.
The vulnerability of the igc component in the Linux operating system’s kernel is related to an operation that goes beyond the buffer boundaries in memory within the igcxdpxmit function. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...
The vulnerability of the UDC component of the Dolby Digital Plus audio codec allows a intruder to trigger a service failure.
The vulnerability of the UDC component of the Dolby Digital Plus audio codec is related to recording beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Storage Management Provider component in Windows operating systems allows attackers to disclose sensitive information that is protected by this component’s security measures.
The vulnerability of the Storage Management Provider component in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the password parameter for the goform/fastsettingpppoeset endpoint. Exploiting this vulnerability allows a malicious...
The vulnerability of the TCP/IP protocol stack implementation in the real-time operating system FreeRTOS-Plus-TCP allows a attacker to compromise the confidentiality and accessibility of the protected information.
The vulnerability of the TCP/IP protocol stack implementation in the real-time operating system FreeRTOS-Plus-TCP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility ...
The vulnerability of the Storport.sys driver in Windows operating systems allows attackers to gain elevated privileges.
The vulnerability of the Storport.sys driver in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the CADImage plugin in the IrfanView software, which is used for viewing and playing graphic, video, and audio files, allows a hacker to execute arbitrary code.
The vulnerability of the CADImage plugin in IrfanView, a program for viewing and playing graphic, video, and audio files, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially...
Vulnerabilities of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, Data Domain OS operating system—related to the occurrence of operations outside the buffer in memory, allowing attackers to trigger a service failure.
The vulnerabilities of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS...
The vulnerability of the DIAScreen development environment for industrial equipment lies in the ability to write beyond the buffer boundaries, allowing an attacker to execute arbitrary code.
The vulnerability of the DIAScreen development environment for industrial equipment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
