Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a risk of post-release reuse in multiple calls to setendpoint by vhost-scsi...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a deadlock risk in zynqmpdpignorehpdset...

TOTOLINK A810R 安全漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a command execution vulnerability that stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed command special character...

CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

DEBIAN-CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

UBUNTU-CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

PT-2025-18469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the openvswitch component. The issue concerns the validation of nested key length in the set action, where it is no...

The vulnerability of the `nft_set_ext` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftsetext function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Open Asset Import Library 安全漏洞

Open Asset Import Library assimp is a library of Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library version 5.4.3 and earlier, which originates from a heap buffer overflow in function aiString::Set in file include/assimp/types.h. The vulnerability ...

Medium: ruby3.2

Issue Overview: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in net-imap's response parser. At any time while the...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a out-of-bounds read operation in H5FLarrmalloc in H5FL.c called from H5Ssetextentsimple in H5S.c...

Improper Protection of Alternate Path

Overview yiisoft/yii2 is a Yii PHP Framework. Affected versions of this package are vulnerable to Improper Protection of Alternate Path when defining a class array key in the set function of Component.php. An attacker can achieve code execution by manipulating the input to the behavior attachment...

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers lies in the copying of buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

Multi-Party Private Set Operations from Predicative Zero-Sharing

Typical protocols in the multi-party private set operations MPSO setting enable m 2 parties to perform certain secure computation on the intersection or union of their private sets, realizing a very limited range of MPSO functionalities. Most works in this field focus on just one or two specific...

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

scsi: ufs: bsg: Set bsg_queue to NULL after removal

...

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

...

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, an...

MikroTik RouterOS Improper Input Validation (CVE-2008-6976)

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

jerryhanjj ERP 安全漏洞

jerryhanjj ERP is an ERP import, export, storage and marketing system developed by Jerry's personal developer. A security vulnerability exists in jerryhanjj ERP version 1.0, which is caused by a SQL injection in the setpassword function of home.php...