3699 matches found
CVE-2025-1722
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2025-1722
CVE-2025-1722 affects IBM Concert Software 1.0.0–2.1.0. The root cause is an improper clearing of heap memory, which could allow a remote attacker to obtain sensitive information stored in allocated memory. Public descriptions across IBM/Red Hat/NVD entries corroborate the memory disclosure risk ...
CVE-2025-1722
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2025-1719 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2025-1719
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
CVE-2025-1719
IBM Concert Software versions 1.0.0–2.1.0 are affected by CVE-2025-1719 due to improper clearing of heap memory, which could allow a remote attacker to read sensitive information from allocated memory. The issue is documented across multiple sources (NVD/Red Hat/IBM) with IBM explicitly noting a ...
CVE-2025-1719 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...
MiracleLinux 4 : openslp-2.0.0-3.AXS4 (AXSA:2018-3270:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2018-3270:01 advisory. openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 Tenable has extracted the precedi...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001374)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001374 advisory. In gadgetdevdescUDCshow of configfs.c, there is a possible disclosure of kernel heap memory due to a race condition. This could lead to local information disclosure...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001080)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001080 advisory. Multiple array index errors in drivers/hid/hid-core.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11 allow physically proximate attacke...
CVE-2025-13844
CVE-2025-13844 affects Schneider Electric EcoStruxure Power Build Rapsody. Connected sources confirm a CWE-415 Double Free vulnerability that could cause heap memory corruption when a user imports a malicious SSD project file into Rapsody. Documented impact includes potential memory corruption; C...
Schneider Electric EcoStruxure Power Build Rapsody resource management error vulnerability
Schneider Electric EcoStruxure Power Build Rapsody is a power monitoring platform developed by Schneider Electric, a French company. Schneider Electric EcoStruxure Power Build Rapsody has a resource management vulnerability; this vulnerability stems from a double release issue during the import o...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002571)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002571 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002608)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002608 advisory. Linux Kernel version 3.18 to 4.16 incorrectly handles an SGIO ioctl on /dev/sg0 with dxferdirection=SGDXFERFROMDEV and an empty 6-byte cmdp. This may lead to copying...
CVE-2026-20810
Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb
🐍 mongobleed-scanner - Scan for MongoDB Vulnerabilities Easily...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001683)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001683 advisory. An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted...
FreeRDP 安全漏洞
FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists in FreeRDP versions prior to 3.20.1, which stems from a drive read where the server-controlled read length is used to read file data into the IRP output stream buffer...
CVE-2026-22027
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, the converthexstringtobytearray function in th...