CVE-2026-5450 scanf %mc off-by-one heap buffer overflow

Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow...

EUVD-2023-29123

Malicious code in bioql PyPI...

The vulnerability of the Intel System Support Utility’s scanning function, related to an uncontrolled search path element, allows a malicious actor to escalate their privileges.

The vulnerability of the Intel System Support Utility scanning tool is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

Nasm 缓冲区错误漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in Nasm version 2.15rc0, which stems from a buffer overflow vulnerability in the stdscan.c scanning function...

CVE-2023-25145

A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

Trend Micro Apex One 后置链接漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One agent could stem from a vulnerable link in the scanning function that could allow a local attacker to elevate privileges...

PT-2023-1523 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: The issue is related to a link following vulnerability in the scanning function of the Trend Micro Apex One agent. This could allow a local attacker to escalate privileges on...

CVE-2022-36336

CVE-2022-36336 involves a local privilege-escalation in Trend Micro Apex One and Worry-Free Business Security agents caused by a link-following vulnerability in the scanning function. The available details identify the vulnerable component as the scanning service path in these products (notably t...

ESTsoft Alyac 缓冲区错误漏洞

ESTsoft Alyac is a low-priced comprehensive security software from ESTsoft Korea. A security vulnerability exists in ESTsoft Alyac version 2.5.7.7, which stems from an out-of-bounds read vulnerability in the scanning function. The vulnerability is exploited by attackers to trigger the vulnerabili...