681 matches found
PT-2025-24448
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A flaw exists in the VoiceInteractionManagerService.java component within the Android operating system. Specifically, a logic error in the onHandleForceStop function can cause the system to...
The vulnerability of the /boafrm/formStaticDHCP function in the microprogramming software of TOTOLINK N150RT routers allows a attacker to execute arbitrary code.
The vulnerability of the /boafrm/formStaticDHCP function in TOTOLINK N150RT router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
ROS-20250424-04
The GPAC multimedia platform vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker to cause a denial of service A vulnerability in a function in gfm2tsprocesspmt of the GPAC multimedia platform is related to buffer copying without checkin...
CVE-2025-27101
Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user should not have access to. All users of t...
webkitgtk: Copying a URL from Web Inspector may lead to command injection
A flaw was found in WebKitGTK. Copying a URL from Web Inspector may lead to command injection due to improper file handling...
CVE-2025-26595 Xorg: xwayland: buffer overflow in xkbvmodmasktext()
A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed-sized buffer on the stack and copies the names of the virtual modifiers to that buffer. The code fails to check the bounds of the buffer and would copy the data regardless of the size...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from a failure to properly validate input when patching and copying Boards...
WordPress plugin DethemeKit For Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to execute arbitrary code, trigger service failures, or disclose sensitive information.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or disclose sensitive information...
USN-7206-4: rsync regression
USN-7206-3 fixed vulnerabilities in rsync for Ubuntu 24.10. The update introduced a regression in rsync. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle...
Azure Linux 3.0 Security Update: kernel (CVE-2024-42301)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42301 advisory. - In the Linux kernel, the following vulnerability has been resolved: dev/parport: fix the array out-of- bound...
CVE-2025-24677
Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...
CVE-2021-26613
improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...
CVE-2022-22106
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto...
CVE-2025-24677
Improper Control of Generation of Code 'Code Injection' vulnerability in wpspin Post/Page Copying Tool postpage-import-export-with-custom-fields-taxonomies allows Remote Code Inclusion.This issue affects Post/Page Copying Tool: from n/a through = 2.0.3...
The vulnerability of the parse_options function in the sbgdec.c component of the libavformat module of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the parseoptions function in the sbgdec.c component of the libavformat module of the FFmpeg multimedia library is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Important: Red Hat Security Advisory: rsync security update
An update for rsync is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...
CVE-2021-3978
When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...
CVE-2021-3978
When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...
CVE-2021-3978
When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service this could allow for a vector, when...