1741 matches found
Important: postgresql-odbc
Issue Overview: psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds...
dubiousdisk
dubious disk - the porygon-z that's super effective against secure boot! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more... Overly permissive code in the Windows boot environment allows for overwriting arbitrary memory, and therefore, arbitrary code execution. Exploitro...
EUVD-2025-211297
Unverified ownership in Secure Encrypted Virtualization SEV firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table RMP is enabled potentially resulting in loss of guest data integrity...
CVE-2025-29940
Unverified ownership in Secure Encrypted Virtualization SEV firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table RMP is enabled potentially resulting in loss of guest data integrity...
CVE-2025-29940
Unverified ownership in Secure Encrypted Virtualization SEV firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table RMP is enabled potentially resulting in loss of guest data integrity...
CVE-2025-29940
A vulnerability exists in the AMD Secure Encrypted Virtualization (SEV) firmware due to unverified ownership (CWE-283). A privileged attacker with access to a malicious hypervisor could overwrite guest memory if segmented Reverse Map Table (RMP) is enabled, potentially leading to a loss of guest ...
CVE-2021-23017-POC
CVE-2021-23017-POC A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact. The issue only affects nginx if the "resolver"...
CVE-2026-88707
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...
CVE-2026-88708
An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Securit...
EUVD-2026-120742
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...
CVE-2026-88707
Certain ASUS Router firmware versions are vulnerable to an out-of-bounds write (CWE-787). This flaw allows an unauthenticated nearby user to send a specially crafted HTTP request with parameters exceeding the buffer length. Successful exploitation could lead to overwriting other memory regions or...
CVE-2026-88707
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...
CVE-2026-88707: ASUS Router firmware: An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request…
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...
PT-2026-144769
Unverified ownership in Secure Encrypted Virtualization SEV firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table RMP is enabled potentially resulting in loss of guest data integrity...
PT-2026-141402
An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...
CVE-2026-121964
A flaw was found in FreeRDP. A compromised or malicious Remote Desktop RD Gateway server can send specially crafted Remote Procedure Call RPC network messages to a connecting client. Because the client verifies total buffer capacity instead of remaining buffer space before writing incoming data,...
AZL-113143 CVE-2026-54914 affecting package fluent-bit 3.1.10-8
WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, wasipolloneoff in core/iwasm/libraries/libc-wasi/libcwasiwrapper.c validates the output pointer for only one wasieventt, while wasmtimessppolloneoff in...
CVE-2026-54914 WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer
WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. Prior to 2.4.5, wasipolloneoff in core/iwasm/libraries/libc-wasi/libcwasiwrapper.c validates the output pointer for only one wasieventt, while wasmtimessppolloneoff in...
SUSE CVE-2026-120057
psqlODBC copies the reply to a large-object read loread into the application's buffer using the length sent by the server, without comparing it to the buffer size. A server not trusted under current SSL settings, or a man-in-the-middle, can return more bytes than the buffer holds and overwrite...
SUSE CVE-2026-120067
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...