EUVD-2021-26823

Malware in sbrugna...

EUVD-2022-55424

Malicious code in bioql PyPI...

EUVD-2023-29660

Malicious code in bioql PyPI...

EUVD-2021-34025

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3022

Software: libarchive 3.6.2 OS: ROSA-CHROME unaffected versions = libarchive-3.6.2-8 affected versions libarchive-3.6.2-8 CVE-ID: CVE-2025-5915 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in libarchive allows a buffer overflow to occur on the heap during filter processing, which could...

The vulnerability of the elflink.c component in the GNU Binutils development environment allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the elflink.c component of the GNU Binutils development environment is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit, which allows a hacker to cause a service failure.

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit, which allows a hacker to cause a service failure.

The vulnerability of the command-line utility nvdisasm in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the tcpdump software for analyzing network traffic lies in its ability to read data beyond the allowable memory range, allowing an attacker to cause a service failure.

The vulnerability of the tcpdump software for analyzing network traffic is related to reading data beyond the allowable memory range. Exploiting this vulnerability can allow a hacker to cause a service failure...

CVE-2025-21483

CVE-2025-21483 affects Qualcomm Snapdragon embedded platform firmware in the Data Network Stack & Connectivity component. It stems from a buffer overflow during RTP packet reassembly of NAL units, leading to memory corruption in the UE. The CVSS 3.1/3.1 vector is Network, Privileges=None, User in...

SUSE-SU-2025:03246-1 Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Updated CUDA variant to 580.82.07: - CVE-2025-23277: Fixed access to memory outside bounds permitted under normal use cases in NVIDIA Display Driver bsc1247528. - CVE-2025-23278: Fixed improper index validation by issuing a...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Safari

This is an optimization error in the way RegEx matching is handled, leading to an exploit for the latest version of Safari as of Dec. 6 2018. The exploit is for CVE-2018-4233, which was patched in the current WebKit release. The vulnerability is in the WebKit engine and allows for remote code...

Advisory ROSA-SA-2025-3000

software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-24 affected versions grub2-2.06-24 CVE-ID: CVE-2024-45779 BDU-ID: 2025-03832 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the BFS file system of the Grub2 operating system boot loader is related to reads outside the allowed...

CVE-2025-10225

Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-119 in the OpenSSL-based session module in AxxonSoft Axxon One C-Werk 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering...

SUSE-SU-2025:20691-1 Security update for ucode-intel

This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20250812 release bsc1248438 - CVE-2025-20109: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel Processors may allow an authenticated user to potentially enable...

Wago CODESYS V2 Runtime Toolkit Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-34595)

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite. This plugin only works with Tenable.ot. Please visit...

The vulnerability of the cJSON_ParseWithLength function allows attackers to access confidential information.

The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...

OESA-2025-2130 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

The vulnerability of the cgroup subsystem’s BPF kernel mechanism in Linux systems allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the cgroup subsystem’s BPF kernel mechanism in Linux lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

ROS-20250827-08

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...