23487 matches found
Medium: java-1.8.0-openjdk
Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 a...
WebKit XSS
The vulnerability of the Web page rendering module in WebKit operating systems for iOS and iPadOS relates to the use of an untrusted intermediate policy file during the processing of Canvas elements. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protecte...
Qualcomm DSP service Data Compromise
The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...
[SECURITY] Fedora 43 Update: ruby-3.4.7-28.fc43
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
CLSA-2025-1762544201 libtiff: Fix of CVE-2025-9900
CVE-2025-9900: fix write-what-where vulnerability in processing TIFF image files...
CVE-2025-27918
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...
JAXP Unauthorized Access
The vulnerability of the JAXP component in Java SE, GraalVM for JDK, and GraalVM Enterprise Edition programs is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to the platform’s data...
Tenda G3 Wireless Access Point DoS
The vulnerability of the ipMacBindListStore function in the Tenda G3 wireless access point’s microprogramming software is related to buffer overflow when processing the listStr parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially crafted POST...
EUVD-2025-38150
An issue was discovered in AnyDesk before 9.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing of an Identity user image within the Discovery feature, or when establishing a connection between any two clients...
Prototype Pollution
@messageformat/runtime is vulnerable to Prototype Pollution. The vulnerability is due to insufficient validation of nested message keys during message data processing, which allows an attacker to inject arbitrary properties into the Object prototype and cause denial of service or unexpected...
AnyDesk has a vulnerability related to input validation.
AnyDesk is a remote desktop connection software from the German company AnyDesk. A security vulnerability exists in AnyDesk versions prior to 9.0.0 that stems from an integer overflow and heap buffer overflow in UDP packets when processing Identity user images in the Discovery feature or...
Tenda CH22 Router Code Execution
The vulnerability of the fromSafeClientFilter function /goform/SafeClientFilter in the Tenda CH22 router software lies in the fact that the operation is executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990496)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990496 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ibumad, which maintains...
CMSimple_XH security vulnerabilities
CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, for...
CVE-2025-27918
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7.1.2, and AnyDesk for Android before 8.0.0. It has an integer overflow and resultant heap-based buffer overflow via a UDP packet during processing o...
PT-2025-45627
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. This affects programs which validate arbitrary certificate chains...
EUVD-2025-37893
A vulnerability in the RADIUS setting Reject RADIUS requests from clients with repeated failures on Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to cause Cisco ISE to restart unexpectedly. This vulnerability is due to a logic error when processing a RADIUS...
CVE-2025-54334
An issue was discovered in the NPU driver in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500. There is a NULL Pointer Dereference of hdev in the npuvertexbootup function...