1214 matches found
CVE-2020-18280
Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function...
CVE-2014-125075
A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix thi...
CVE-2005-3015
Cross-site scripting XSS vulnerability in IBM Lotus Domino 6.5.2 allows remote attackers to inject arbitrary web script or HTML via the 1 BaseTarget or 2 Src parameters...
CVE-2025-37846
In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...
OESA-2025-1428 augeas security update
Augeas is a configuration editing tool. It parses configuration files in their native formats and transforms them into a tree. Configuration changes are made by manipulating this tree and saving it back into native config files. Security Fixes: A vulnerability has been found in Hercules Augeas...
CVE-2025-1439
The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'advancediframe' shortcode in all versions up to, and including, 2024.5 due to insufficient input sanitization and output escaping on user supplied attributes through the 'src' attribute when th...
Open Asset Import Library（assimp） 缓冲区错误漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter src.entries can lead to out-of-bounds reads...
Security update for zvbi
This update for zvbi fixes the following issues: CVE-2025-2173: Fixed check on srclength to avoid an unitinialized heap read bsc1239222. CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c bsc1239299. CVE-2025-2175: Fixed integer overflow in...
UBUNTU-CVE-2025-2588
A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function recaseexpand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub47D878...
CVE-2025-29118
CVE-2025-29118 affects the Tenda AC8 router with firmware version V16.03.34.06. A stack overflow is triggered by the src parameter in the function sub_47D878, leading to denial of service (availability impact described as HIGH). CVSS information indicates a medium base score (6.5) with adjacent a...
SUSE CVE-2025-2338
A vulnerability, which was classified as critical, was found in tbeu matio 1.5.28. Affected is the function strdupvprintf of the file src/io.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may ...
PT-2025-11386
Name of the Vulnerable Software and Affected Versions tbeu matio version 1.5.28 Description A critical vulnerability has been found in tbeu matio, affecting the function Mat VarPrint of the file src/mat.c. The manipulation leads to a heap-based buffer overflow. The attack may be initiated remotel...
Malicious code in digits-electron-src (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cbfd2aa51f6d4ff7a9bc75c482e5fde9d3f100b1f911d8f55dbc642696897aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Tenda AC15 Buffer Overflow Vulnerability (CNVD-2025-09165)
The Tenda AC15 is a wireless router from the Chinese company Tenda. The Tenda AC15 suffers from a buffer overflow vulnerability that stems from improper handling of the parameter src, no details of the vulnerability are provided at this time...
CVE-2025-25634
A vulnerability has been found in Tenda AC15 15.03.05.19 in the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow...