CVE-2025-40306

CVE-2025-40306 concerns the Linux kernel/orangefs xattr handling. The vulnerability arises from the xattr_key() helper using the pointer variable in the loop condition instead of dereferencing it, causing the loop to continue past valid C strings and potentially walk memory indefinitely. This led...

SUSE CVE-2004-0594

The memorylimit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when registerglobals is enabled, allows remote attackers to execute arbitrary code by triggering a memorylimit abort during execution of the zendhashinit function and overwriting a...

DEBIAN-CVE-2019-14532

An issue was discovered in The Sleuth Kit TSK 4.6.6. There is an off-by-one overwrite due to an underflow on tools/hashtools/hfind.cpp while using a bogus hash table...