2561 matches found
CVE-2019-13156
NDrive1.2.2.sys in Naver Cloud Explorer has a stack-based buffer overflow, which allows attackers to cause a denial of service when reading data from IOCTL handle...
CVE-2013-3952
The fillpipeinfo function in bsd/kern/syspipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROCPIDFDPIPEINFO option to the procinfo system call for a kernel pipe handle...
Function Call with Incorrectly Specified Arguments
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Function Call with Incorrectly Specified Arguments via an incorrect handle provided in unspecified...
Microsoft Edge (Chromium) < 136.0.3240.76 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.76. It is, therefore, affected by multiple vulnerabilities as referenced in the May 15, 2025 advisory. - Chromium/Google Chrome is vulnerable to insufficient policy enforcement in Loader. A proof-of-concept...
Chromium: CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome that stems from an unspecified incorrect handle being provided, which could lead to information disclosure, elevation of privilege...
kernel: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
A flaw was found in the packet scheduler API in the Linux kernel. An invalid assumption about qdiscs with major handle ffff allows qdiscs, such as DRR, that maintain an active class list to cause a use-after-free with a dangling class pointer...
kernel: Bluetooth: Ignore too large handle values in BIG
A vulnerability was found in the Linux kernel's bluetooth subsystem in the function hcilebigsyncestablishedevt where a lack of proper checks does not validate whether a received connection handle exceeds the maximum allowed value. This could lead to system instability or crashes...
HID: appleir: Fix potential NULL dereference at raw event handle
...
CVE-2023-53111
CVE-2023-53111 affects the Linux kernel loop subsystem. The vulnerability arises from a use-after-free in loop_handle_cmd() after do_req_filebacked() completes, which may dereference cmd or rq depending on whether the request was completed when using asynchronous I/O. The issue can lead to a kern...
SUSE CVE-2025-37780
In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofsfhtoparent. 1 The handlebytes value passed in by the reproducing program is equal to 12. In handletopath, only 12 bytes of memory are...
CVE-2025-32887
creationtimestamp| type| source ---|---|--- 2025-05-01 18:15:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14356 2025-05-01 21:02:21+00:00| seen| Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU...
DEBIAN-CVE-2025-37780
In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofsfhtoparent. 1 The handlebytes value passed in by the reproducing program is equal to 12. In handletopath, only 12 bytes of memory are...
CVE-2025-37780
CVE-2025-37780 — Linux kernel isofs slab-out-of-bounds . The vulnerability occurs in isofs_fh_to_parent when a too-small fid is used: 12 bytes allocated for file_handle->f_handle while accessing parent_block requires at least 16 bytes, causing a potentially dangerous read. The issue was observ...
OpenPLC 竞争条件问题漏洞
OpenPLC is an open source programmable logic controller from the individual developer Thiago Alves. It can provide low-cost industrial solutions for automation and research. A security vulnerability exists in OpenPLC versions 3 through 64f9c11, which stems from a memory corruption in server.cpp...
SUSE CVE-2025-22043
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for durable handle context Add missing bounds check for durable handle context...
CVE-2025-3479
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Order Replay in all versions up to, and including, 1.42.0 via the 'handlestripesingle' function due to insufficient validation on a user controlled key. This makes it possible for...
WordPress plugin Forminator Forms 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
