Cisco ASA Improper Input Validation (CVE-2020-3191)

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...

CVE-2025-15059: Heap-based Buffer Overflow

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page o...

CVE-2020-11276

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

PT-2024-29146

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns the validation of the HE operation element in the Linux kernel's cfg80211 module. Specifically, it involves validating that the HE operation element has the correct...

Denial Of Service (DoS)

encodedid-rails is vulnerable to Uncontrolled Resource Consumption. The vulnerability is caused due to improper length validation within the id parameter. This allows an attacker to send a request with an exceptionally long id parameter resulting in a Denial of Service DoS...

Bentley Systems MicroStation 安全漏洞

A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Lack of proper validation of the length before copying user-supplied data to a heap-based buffer can be exploited by an attacker to...

Buffer overflow

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

PT-2021-13487

Name of the Vulnerable Software and Affected Versions NVIDIA vGPU software versions prior to 12.3 NVIDIA vGPU software versions prior to 11.5 NVIDIA vGPU software versions prior to 8.8 Description The Virtual GPU Manager vGPU plugin in NVIDIA vGPU software contains a flaw where it improperly...

CVE-2020-3191: Improper Input Validation

A vulnerability in DNS over IPv6 packet processing for Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly reload, resulting in a denial of service DoS condition. The...

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...

Windows NT NNTP Component Buffer Overflow

The Network News Transfer Protocol NNTP component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an...