1703 matches found
The vulnerability of the reduce method in the security scanner for analyzing Python Picklescan files allows a perpetrator to execute arbitrary code.
The vulnerability of the reduce method in the Python Picklescan security scanner lies in the use of an incomplete black list when processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Vulnerability of the loongson2_clk_probe() function in the drivers/clk/clk-loongson2.c module – This driver is part of the Linux kernel’s software synchronization support, which can be exploited by attackers to cause system failures.
Vulnerability of the loongson2clkprobe function in the drivers/clk/clk-loongson2.c module – The Linux kernel programming synchronization driver has a vulnerability related to copying buffers without checking input data. Exploiting this vulnerability could allow an attacker to cause system failure...
The vulnerability of the kernel component of the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the kernel component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
xorg: xmayland: Value overflow in XkbSetCompatMap()
A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...
The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.
The vulnerability of the Framework component in Android operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the Linux operating system’s kernel Wi-Fi component, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause service failures...
The usability of the PMU firmware microcode, generated using Xilinx SDK/Vitis/PetaLinux software tools for Zynq UltraScale+ devices, allows the intruder to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PMU firmware microcode generated using Xilinx SDK/Vitis/PetaLinux software tools in Zynq UltraScale+ devices is related to errors in processing input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the rseq.c component in the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the rseq.c component in the Linux operating system’s kernel is related to its dependence on unreliable input data during security decision-making. Exploiting this vulnerability allows attackers to compromise the confidentiality and accessibility of protected information...
The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router, related to the lack of measures for cleaning input data, allows a hacker to execute arbitrary commands.
The vulnerability of the microprogrammed software of the EDIMAX BR-6478AC router lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
CVE-2025-33194
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service...
EUVD-2025-199627
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service...
xorg: xmayland: Value overflow in XkbSetCompatMap()
A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...
xorg: xmayland: Value overflow in XkbSetCompatMap()
A flaw was identified in the X.Org X server’s X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation may overflow, leading to memory corruption or a cras...
The vulnerability of ICTBroadcast’s software for unified communications and telemarketing lies in the insufficient verification of input data, allowing attackers to execute arbitrary code.
The vulnerability of ICTBroadcast’s software for unified communications and telemarketing is related to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2025-48055
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service...
WordPress CSV to SortTable plugin cross-site scripting vulnerability
WordPress CSV to SortTable plugin is WordPress plugin for converting CSV files to interactive sorting tables. The WordPress CSV to SortTable plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data,...
Student Record System admin-profile.php file cross-site scripting vulnerability
Student Record System is a software application. Student Record System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the adminname and aemailid parameters of admin-profile.php, which can be exploited to...
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.
The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...