The vulnerability of the sscanf() function in Tenda AC21 router software allows a hacker to execute arbitrary code.

The vulnerability of the sscanf function in Tenda AC21 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the kernel component in Linux operating systems, which allows a hacker to cause a system failure

The vulnerability of the kernel component in Linux operating systems is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the bpf_jit_comp.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpfjitcomp.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the block component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the block component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netmem component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the netmem component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the am65_cpsw-nuss.c component’s am65_cpsw_nuss_remove_tx_chns() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the am65cpsw-nuss.c component’s am65cpswnussremovetxchns function in the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the op_init_lcd_dma() function in the lcd_dma.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opinitlcddma function in the lcddma.c component of the Linux kernel relates to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the `security/safesetid/securityfs.c` component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the security/safesetid/securityfs.c component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2025-2336 python-xmltodict security update

Python module that makes working with XML feel like you are working with JSON Security Fixes: XML Injection vulnerability in xmltodict allows Input Data Manipulation.This issue affects xmltodict: 0.14.2.CVE-2025-9375...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

Information disclosure when Video engine escape input data is less than expected minimum size...

CVE-2025-27036

CVE-2025-27036 concerns Qualcomm chipsets with a vulnerability in the Video engine’s handling of input data smaller than the expected minimum size. Root cause: a buffer/processing mismatch in the video engine leads to information disclosure. Affected: Qualcomm chipsets (Video engine component); e...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from the video engine escaping input data smaller than the expected minimum size, which could lead to information disclosure...

PT-2025-39274

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description An information disclosure issue exists when the video engine processes input data that is smaller than the expected minimum size. This can lead to the disclosure of sensitive information. Approximately 1000...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-8276 HTML Injection in Patika Global Technologies' HumanSuite

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

PT-2025-37992

Name of the Vulnerable Software and Affected Versions HumanSuite versions prior to 53.21.0 Description HumanSuite is susceptible to multiple issues including improper encoding or escaping of output, improper neutralization of special elements in output used by a downstream component injection,...

Debian dla-4302 : node-sha.js - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4302 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4302-1 [email protected] https://www.debian.org/lts/security/...

The vulnerability of the software platform based on Git for collaborative code development in GitLab CE/EE is related to deficiencies in the mechanism for limiting the amount of input data. This allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab CE/EE is related to deficiencies in the mechanism for limiting the amount of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger service...