CVE-2025-53538

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of...

CVE-2025-7283

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7285

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7299

CVE-2025-7299 affects IrfanView CADImage Plugin; DWG file parsing has memory corruption that can allow arbitrary code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). Root cause: insufficient validation during DWG parsing; impact is remote...

CVE-2025-7317 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7308

CVE-2025-7308 affects the IrfanView CADImage Plugin, specifically the DWG file parser. The flaw is a memory corruption issue caused by insufficient validation of user-supplied data during DWG parsing, which can allow an attacker to execute code in the context of the current process. Exploitation ...

CVE-2025-7308 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7307 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7306

The CVE-2025-7306 vulnerability affects the IrfanView CADImage Plugin and arises in the DWG file parsing path, where insufficient validation leads to memory corruption and potential remote code execution. The issue allows code execution in the context of the current process and requires user inte...

CVE-2025-7303

CVE-2025-7303 concerns IrfanView CADImage Plugin. The connected sources confirm a vulnerability in DWG file parsing where lack of proper validation of user-supplied data leads to memory corruption, enabling remote code execution in the plugin process. Affected component: IrfanView CADImage Plugin...

CVE-2025-7292 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7278 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7272

CVE-2025-7272 concerns IrfanView CADImage Plugin, where parsing of DXF files can trigger a memory corruption leading to remote code execution. The flaw is tied to insufficient validation of user-supplied data during DXF parsing, allowing an attacker to run arbitrary code in the context of the aff...

CVE-2025-7271 IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7239 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...

CVE-2025-7244

CVE-2025-7244: IrfanView CADImage Plugin DWG parsing memory corruption leading to remote code execution . The available sources state that the vulnerability resides in the DWG file parser of the IrfanView CADImage Plugin, caused by insufficient validation of user-supplied data during DWG parsing,...

Nokogiri patches vendored libxml2 to resolve multiple CVEs

Summary Nokogiri v1.18.9 patches the vendored libxml2 to address CVE-2025-6021, CVE-2025-6170, CVE-2025-49794, CVE-2025-49795, and CVE-2025-49796. Impact and severity CVE-2025-6021 A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead t...

SQLite < 3.50.2 Memory Corruption

The version of SQLite installed on the remote host is prior to 3.50.2. It is, therefore, affected by a memory corruption issue. The vulnerability can occur where the number of aggregate terms could exceed the number of columns available, leading to memory corruption. Note that Nessus has not test...

CVE-2025-41239

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes...

CVE-2025-6965

There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above...