551 matches found
EUVD-2025-13674
Malicious code in bioql PyPI...
EUVD-2023-54128
Malicious code in bioql PyPI...
The vulnerability of the sscanf() function in Tenda AC21 router software allows a hacker to execute arbitrary code.
The vulnerability of the sscanf function in Tenda AC21 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the `security/safesetid/securityfs.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the security/safesetid/securityfs.c component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the `drivers/opp/core.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the drivers/opp/core.c component of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-21481
CVE-2025-21481 is linked to memory corruption during private key encryption in a trusted application, specifically within the Adreno GPU DRM driver. The PT-2025-23797 entry describes a use-after-free condition in the Direct Rendering Manager (DRM) Driver of the Adreno GPU, affecting unspecified A...
CVE-2025-21476
CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...
The vulnerability of the formWPS function in the /goform/formWPS file of the D-Link DIR-513 router’s microprogramming software allows a intruder to cause a service failure.
The vulnerability of the formWPS function in the /goform/formWPS module of the D-Link DIR-513 router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the webpage parameter. Exploiting this vulnerability allows a...
Unchecked Input for Loop Condition
Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the XML-RPC due to unchecked input in the loop condition. An attacker can exhaust system resources by sending specially...
GHSA-95H4-8MQC-4MPF Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC
Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers...
CVE-2025-43801
An XML-RPC input validation issue in Liferay Portal/dxP: Unchecked input for loop condition affects com.liferay.portal.impl in Liferay Portal 7.4.0–7.4.3.111 and Liferay DXP 2023.Q4.0, 2023.Q3.1–2023.Q3.4, 7.4 GA–update 92, 7.3 GA–update 35, enabling DoS via crafted XML-RPC requests. Affected pac...
CVE-2025-43801: Unchecked Input for Loop Condition
Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers...
The vulnerability of the /goform/saveParentControlInfo component in the Tenda RX3 router software allows a intruder to trigger a service failure.
The vulnerability of the /goform/saveParentControlInfo component in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the /goform/setPptpUserList component in the Tenda RX3 router software allows a attacker to cause a service failure.
The vulnerability of the /goform/setPptpUserList component in the Tenda RX3 router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of the /goform/setQoS component of the Tenda F3 wireless router’s microprogramming software allows a attacker to execute arbitrary code.
The vulnerability of the /goform/setQoS component of the Tenda F3 wireless router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the QosList parameter. Exploiting this vulnerability allows an attacker to execute...
Dahua video surveillance cameras have a vulnerability related to copying into the buffer without checking the size of the input data. This allows intruders to execute arbitrary codes or trigger malfunctions during maintenance.
The vulnerability of Dahua video surveillance cameras lies in the copying of input data into the buffer without checking its size. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause malfunctions in the system...
Wago CODESYS V2 Web-Server Classic Buffer Overflow (CVE-2021-30191)
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
The vulnerability of the `unpin_user_folio` function in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the unpinuserfolio function in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the Service Port FTP-server ProFTPD component, which allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the Service Port FTP-server ProFTPD component is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code or cause service failures...
Unchecked Input for Loop Condition
Overview Affected versions of this package are vulnerable to Unchecked Input for Loop Condition via the exsltDynMapFunction function in libexslt/dynamic.c when handling specially crafted XSLT documents that trigger uncontrolled recursion. An attacker can cause stack exhaustion and disrupt service...