CWE-1284

An issue was discovered in mouse07410 asn1c thru 0.9.29 (2025-03-20) - a fork of vlm asn1c. In UPER (Unaligned Packed En

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not va

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

Tesla Wall Connector Content-Length Header Improper Input Validation Remote Code Execution Vulnerability. This vulnerabi

Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is cau

An issue in the DeviceloControl function of ITE Tech. Inc ITE IO Access v1.0.0.0 allows attackers to perform arbitrary p

Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is c

A code execution vulnerability exists in the Xiaomi Game center application product. The vulnerability is caused by imp

Software installed and run as a non-privileged user may conduct improper GPU system calls to cause kernel system memory

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s p

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remot

On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged

Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

Improper Validation of Specified Quantity in Input vulnerability in Convers Lab WP SmartPay smartpay.This issue affects

An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.

Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 202

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for th

NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified

An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec pars

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex

In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firm

SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by u

An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of

Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON doc

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated us

Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbea

Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to sen

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory,

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size Thi

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to in

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table

On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is rec

An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices t

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing

A vulnerability has been found in ywxbear PHP-Bookstore-Website-Example and PHP Basic BookStore Website up to 0e0b9f542f

Improper Validation of Specified Quantity in Input vulnerability in TCP Communication Function on Mitsubishi Electric Co

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEG

Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory locat

A data corruption vulnerability has been identified in the luksmeta utility when used with the LUKS1 disk encryption for

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by

A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS

Improper Validation of Specified Quantity in Input vulnerability in Cozmoslabs Profile Builder profile-builder allows Ph

Improper validation of specified quantity in input issue exists in Real-time Bus Tracking System versions prior to 1.1.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3,

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initialization

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer un

In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum

python-markdownify (aka markdownify) before 0.14.1 allows large headline prefixes such as <h9999999> in addition to <h1>