RUSTSEC-2025-0063 Possible unsound public API

The public accessible struct SyncVec has a public safe method getunchecked. It accept a parameter index and used in the getunchecked without sufficient checks as mentioned here...

Out of bounds access in public safe API

Rows::rowunchecked allows out of bounds access to the underlying buffer without sufficient checks. The arrow2 crate is no longer maintained, so there are no plans to fix this issue. Users are advised to migrate to the arrow crate, instead...

SUSE CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

ROS-20250424-04

The GPAC multimedia platform vulnerability involves uncontrolled resource consumption. Exploitation The vulnerability could allow an attacker to cause a denial of service A vulnerability in a function in gfm2tsprocesspmt of the GPAC multimedia platform is related to buffer copying without checkin...

The vulnerability of the delWewifiPic() function in the Tenda W18E router software allows a hacker to deliver specially created data to the application and execute arbitrary code.

The vulnerability of the delWewifiPic function in the Tenda W18E router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to deliver specially crafted data to the application and execute arbitrary code...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

CVE-2025-43963

In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked devmkasprintf return value that could lead to a null pointer dereference...

The vulnerability of the AdvSetMacMtuWan function in the microprogramming software for Tenda AC10 allows a hacker to execute arbitrary code.

The vulnerability of the AdvSetMacMtuWan function in the Tenda AC10 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted GE...

Vulnerability of the trans_stat_show() function in the drivers/devfreq/devfreq.c module – A driver for supporting dynamic voltage and frequency scaling in the Linux operating system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the transstatshow function in the drivers/devfreq/devfreq.c module – The drivers for dynamic voltage and frequency scaling in the Linux operating system are vulnerable to buffer overflow attacks without proper input data size checking classical buffer overflow attack. Exploiting...

The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

The vulnerability of the formWlSiteSurvey function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formWlSiteSurvey function in the microprogrammed routing software EDIMAX RE11S lies in the copying of buffers without checking the size of the input data when processing the selSSID parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

The vulnerability of the read_subimage_data function in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the readsubimagedata function in the OpenImageIO image processing library is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

CVE-2025-32035 DNN does not check the contents of a file when uploading files

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to 9.13.2, when uploading files e.g. when uploading assets, the file extension is checked to see if it's an allowed file type but the actual contents of the file aren't checked. This...

389-ds-base: null pointer dereference leads to denial of service

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the CDUP Command Handler not checking the input for valid length when processing CDUP commands, no details of the vulnerability are provided at this time...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the SYST command processing component failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a deni...

The vulnerability of the form_fast_setting_wifi_set function in the microprogrammed router software Tenda AC1206 allows a hacker to execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC1206 router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted...