250 matches found
heartbleed-vulnerability-exploitation
heartbleed-vulnerability-exploitation Description hands on investigation of the Heartbleed vulnerability CVE-2014-0160. Summary this lab documents a hands-on investigation of the Heartbleed vulnerability, a critical flaw in OpenSSL's implementation of the TLS heartbeat extension. the goal was to...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash...
CVE-2026-6730 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...
CVE-2026-90153: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound smbcheckpermdacl ACE walks by DACL size smbcheckpermdacl validates that the DACL fits inside the NT security descriptor, but then bounds its two ACE walks by the remaining NTSD length aclsize rather than the DACL's...
CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...
CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...
CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...
CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...
CVE-2026-80101
A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...
The vulnerability of the `squashfs_readmetadata()` function in the `fs/squashfs/cache.c` file of the Squashfs file system module in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the squashfsreadmetadata function in the fs/squashfs/cache.c file of the Squashfs file system in the Linux kernel is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to compromise...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...
CVE-2026-18086 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking...
CVE-2026-18086
IBM i 7.3–7.6 is affected by CVE-2026-18086 in Java Secure Sockets Extension where improper bounds checking could allow a local attacker to execute arbitrary code or cause a denial of service. The NVD/NVD IBM bulletin describe the root cause as bounds-checking issues in JSSE, with a base CVSS v3....
PT-2026-71183
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper bounds checking may allow a remote authenticated attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...
PT-2026-60872
Name of the Vulnerable Software and Affected Versions IBM Storage Protect Client versions 8.1.0.0 through 8.1.27.1 IBM Storage Protect Client versions 8.2.0.0 through 8.2.1.0 Description Improper bounds checking leads to a heap-based buffer overflow, which occurs when a program writes more data t...
CVE-2026-20156
CVE-2026-20156 affects Cisco RoomOS . The issue is described as improper restriction of operations within the bounds of a memory buffer (CWE-119), leading to potential memory corruption. Cisco’s security advisory and related sources indicate a software hardening release that addresses these vulne...
PT-2026-81853
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the file-xwd plugin occurs when processing specially crafted XWD image files. The plugin validates image width and bytes-per-line parameters independently instead of ensuring their...