16043 matches found
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...
Azure Virtual Machines Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Azure Virtual Machines allows an authorized attacker to disclose information over a network...
PT-2025-32841 · Microsoft · Office Word +1
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: A buffer over-read issue exists in Microsoft Office Word, potentially allowing a local attacker to disclose information. Recommendations: At the moment, there is no informatio...
Ivanti多款产品 缓冲区错误漏洞
Ivanti Connect Secure ICS and others are products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure IPS is a network access control NAC solution.Ivanti ZTA Gateway is a component in a network access software. A buffer error...
Bouncy Castle 安全漏洞
Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions 1.77 and earlier, which stems from an unrestricted resource allocation that could lead to...
Linux Distros Unpatched Vulnerability : CVE-2017-16914
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stubsendretsubmit function drivers/usb/usbip/stubtx.c in the Linux Kernel before version 4.14.8, 4.9.71, 4.1.49, and 4.4.107 allows attackers to cause a...
CVE-2025-8863
YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission...
CVE-2025-34150
The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges...
CVE-2025-47219
A flaw was found in gstreamer1-plugins-good. The isomp4 plugin's qtdemuxparsetrak function incorrectly handles MP4 file parsing, resulting in a heap buffer over-read. This flaw allows a local attacker to provide a specially crafted MP4 file. This over-read can lead to information disclosure...
CVE-2025-47183
A flaw was found in gstreamer1-plugins-good. The isomp4 plugin's qtdemuxparsetree function incorrectly handles MP4 file parsing, resulting in a heap buffer over-read. This flaw allows a local attacker to trigger this vulnerability by providing a specially crafted MP4 file. This over-read can lead...
Microarchitectural Attacks on the Stack Engine
Summary Researchers from ETH Zurich have published a paper titled “One Flew over the Stack Engine’s Nest: Practical Microarchitectural Attacks on the Stack Engine.” AMD continues to recommend software developers employ existing best practices including constant time algorithm and avoid...
Linux Distros Unpatched Vulnerability : CVE-2023-4236
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal da...
Linux Distros Unpatched Vulnerability : CVE-2022-0812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpcrdma.c in the Linux Kernel. This flaw allows an attacker with normal user...
Linux Distros Unpatched Vulnerability : CVE-2020-36426
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtlsx509crlparseder has a buffer over-read of one byte. CVE-2020-36426 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2017-8240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over- read vulnerability. CVE-2017-8240 Note that Nessus relie...
SUSE-SU-2025:02718-1 Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2025-5914: Fixed double free due to an integer overflow in the archivereadformatrarseekdata function bsc1244272 - CVE-2025-5915: Fixed heap buffer over read in copyfromlzsswindow at archivereadsupportformatrar.c bsc1244273 -...
CVE-2025-27068 Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address...
CVE-2025-27068 Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address...
CVE-2025-27068
CVE-2025-27068 describes memory corruption while processing an IOCTL command with an arbitrary address, affecting Qualcomm chipsets per multiple feeds. The core issue is a problematic handling path during IOCTL processing that can lead to corruption of memory (severity High, CVSSv3.1: 7.8; Local ...