300 matches found
CVE-2025-10543
In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...
CVE-2025-12758: Incomplete Filtering of One or More Instances of Special Elements
Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength function that does not take into account Unicode variation selectors \uFE0F, \uFE0E appearing in a sequence which lead to improper string length...
EUVD-2025-198081
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
Missing Release of Memory after Effective Lifetime
Overview cbor2 is a CBOR deserializer with extensive tag support Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the decodedefinitelongstring function in source/decoder.c file An attacker can cause process crashes or exhaust system memory...
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
Linux Distros Unpatched Vulnerability : CVE-2023-53729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI TLV value for strings in a lo...
CVE-2023-53729 soc: qcom: qmi_encdec: Restrict string length in decode
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: qmiencdec: Restrict string length in decode The QMI TLV value for strings in a lot of qmi element info structures account for null terminated strings with MAXLEN + 1. If a string is actually MAXLEN + 1 length, this wil...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unrestricted string length that could lead to out-of-bounds access...
EUVD-2021-14882
Malware in sbrugna...
EUVD-2021-14892
Malware in sbrugna...
EUVD-2017-15321
Malware in sbrugna...
EUVD-2021-14888
Malware in sbrugna...
EUVD-2007-0459
Malware in sbrugna...
EUVD-2009-3448
Malware in sbrugna...
EUVD-2012-5733
Malware in sbrugna...
EUVD-2017-6651
Malware in sbrugna...
EUVD-2018-9050
Malware in sbrugna...