398865 matches found
CVE-2020-0796
CVE-2020-0796 Vulnerabilità di integer overflow Inserendo un valore maggiore di quello memorizzabile nel campo OriginalCompressedSegmentSize, la variabile non è in grado di contenerlo e lo interpreta involontariamente come un numero molto piccolo o come un valore negativo. Ciò può causare un...
CVE-2026-63072
OpenSSL CMS decryption is vulnerable to a deterministic 8-byte out-of-bounds heap write (CWE-787) in the key-unwrap path of CMS_decrypt() . The root cause is a mismatch: the output buffer is sized by querying the unwrapped key size, but the AES-WRAP-PAD primitive can write and cleanse more bytes ...
CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
CVE-2026-63072 Heap Buffer Overflow in CMS Key Unwrapping
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
CVE-2008-5416
CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin - Corruzione della memoria tramite SQL Injection Un overflow del buffer basato su heap può verificarsi quando si chiama la stored procedure estesa non documentata "spreplwritetovarbin". Questa vulnerabilità riguarda tutte le versioni di...
ROOT-OS-DEBIAN-12-CVE-2026-58055 CVE-2026-58055 in nghttp2 - Patched by Root
Root has patched CVE-2026-58055 in the nghttp2 package for Root:Debian:12. Multiple fixed versions available...
gstreamer1-plugins-good security update
An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...
RLSA-2026:59133 Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...
gstreamer1-plugins-base security update
An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...
gstreamer1-plugins-good security update
An update is available for gstreamer1-plugins-good. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...
RLSA-2026:59152 Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...
patch-CVE-2026-08742
Patch: CVE-2026-08742 Dettagli della Vulnerabilità CVE : CVE-2026-08742 Prodotto : Citrix ADC Descrizione : Buffer overflow Gravità : Critica Stato della Patch: APPLICATA...
patch-CVE-2026-12087
Patch: CVE-2026-12087 Dettagli della vulnerabilità CVE : CVE-2026-12087 Prodotto : Fortinet FortiOS Descrizione : Heap overflow in SSL-VPN Gravità : Critica Stato della patch: APPLICATA...
CiscoIOSSNMPToolkit
CiscoIOSSNMPToolkit Toolkit di exploit per overflow SNMP di Cisco IOS CVE-2017-6736...
SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices
SNMPocalypse-Cisco-Fehler-lässt-Hacker-Geräte-zum-Absturz-bringen-oder-steuern CVE-2023-20352 ist ein kritischer Stack-Überlauf-Fehler in der SNMP-Engine von Cisco IOS/IOS XE. Mit nur präparierten SNMP-Paketen können entfernte Angreifer Systeme zum Absturz bringen oder die Root-Kontrolle...
DNS-Mayhem-CVE-2026-41096-Deep-Dive
DNS-Mayhem-CVE-2026-41096-Analyse-Approfondie Analyse technique approfondie de CVE‑2026‑41096, un débordement de tas critique dans DNSAPI.dll de Windows permettant l'exécution de code à distance via des réponses DNS malveillantes. Inclut des vecteurs d'attaque, des informations sur le correctif e...
CVE-2025-27480-The-Silent-Gateway-Risk
CVE-2025-27480-Das-stille-Gateway-Risiko Ermöglicht Angreifern, schädlichen Code auszuführen, ohne dass ein geknacktes Passwort, eine Benutzerinteraktion oder sogar ein Fuß im Netzwerk erforderlich ist. Das ist CVE-2025-27480 Es ist spät, du läufst auf Red Bull – wir kennen das alle. Du behebst e...
cve-2022-42475-poc
CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Descrizione CVE-2022-42475 è una vulnerabilità di heap-based buffer overflow nel servizio SSL VPN di FortiOS che consente a utenti malintenzionati non autenticati di eseguire codice arbitrario in remoto RCE tramite...