CVE-2025-32399

An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library to enter an infinite loop by sending a malicious RPC packet...

The vulnerability of the fromSetWirelessRepeat function in the microprogramming software for Tenda AC15 routers allows a hacker to induce a service failure.

The vulnerability of the fromSetWirelessRepeat function in the Tenda AC15 router’s microprogramming system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the delWewifiPic() function in the Tenda W18E router software allows a hacker to deliver specially created data to the application and execute arbitrary code.

The vulnerability of the delWewifiPic function in the Tenda W18E router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to deliver specially crafted data to the application and execute arbitrary code...

The vulnerability of the AdvSetMacMtuWan function in the microprogramming software for Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the AdvSetMacMtuWan function in the Tenda AC10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted GE...

Vulnerability of the trans_stat_show() function in the drivers/devfreq/devfreq.c module – A driver for supporting dynamic voltage and frequency scaling in the Linux operating system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the transstatshow function in the drivers/devfreq/devfreq.c module – The drivers for dynamic voltage and frequency scaling in the Linux operating system are vulnerable to buffer overflow attacks without proper input data size checking classical buffer overflow attack. Exploiting...

The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

The vulnerability of the formWlSiteSurvey function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formWlSiteSurvey function in the microprogrammed routing software EDIMAX RE11S lies in the copying of buffers without checking the size of the input data when processing the selSSID parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the SYST command processing component failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a deni...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the CDUP Command Handler not checking the input for valid length when processing CDUP commands, no details of the vulnerability are provided at this time...

The vulnerability of the form_fast_setting_wifi_set function in the microprogrammed router software Tenda AC1206 allows a hacker to execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC1206 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted...

The vulnerability of the bj10v_print_page() function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents, allowing a malicious individual to execute arbitrary code or cause a service failure.

The vulnerability of the bj10vprintpage function in the contrib/japanese/gdev10v.c file of the BJ10V Device component of the software development kit for processing, transforming, and generating Ghostscript documents is related to the copying of buffers without checking the size of the input data...

Fortinet FortiMail 安全漏洞

Fortinet FortiMail is a suite of email security gateway products from Fortinet. The product provides features such as email security and data protection. A security vulnerability exists in Fortinet FortiMail that stems from buffer copying without checking the input size, which could lead to a...

The vulnerability of the amdgpudebugfs regs_smc_read() function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpudebugfs regssmcread function in the drivers/gpu/drm/amd/amdgpu/amdgpudebugfs.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could...

The vulnerability of the xe_ttm_vram_mgr_new() function in the drivers/gpu/drm/xe/xe_ttm_vram_mgr.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the xettmvrammgrnew function in the drivers/gpu/drm/xe/xettmvrammgr.c file of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the cik_ih_get_wptr() function in the drivers/gpu/drm/amd/amdgpu/cik_ih.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cikihgetwptr function in the drivers/gpu/drm/amd/amdgpu/cikih.c module of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to...

Zoom Workplace Apps Buffer Overflow Vulnerability

Zoom Workplace Apps is an enterprise-grade collaboration platform that combines video conferencing, team collaboration, AI assistance, and other features for hybrid office scenarios. Zoom Workplace Apps suffers from a buffer overflow vulnerability that stems from certain applications not properly...

The vulnerability of the process_symtab() function in the eu-readelf component of the ELF file modification and analysis utility Elfutils, which allows a attacker to cause a service failure.

The vulnerability of the processsymtab function in the eu-readelf component of the ELF file modification and analysis tool Elfutils relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...

Azure Linux 3.0 Security Update: mariadb (CVE-2024-5991)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-5991 advisory. - In function MatchDomainName, input param str is treated as a NULL terminated string despite being user...

The vulnerability of the GSL mathematical library, related to copying buffers without checking the input data, allows a violator to trigger a service failure.

The vulnerability of the GSL mathematical library relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...