18 matches found
Security update for duc (moderate)
openSUSE Security Update: Security update for duc Announcement ID: openSUSE-SU-2025:0496-1 Rating: moderate References: 1254566 Cross-References: CVE-2025-13654 CVSS scores: CVE-2025-13654 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP6 An...
Fedora: Security Advisory (FEDORA-2025-d73e0a567d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 42 : duc (2025-d73e0a567d)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d73e0a567d advisory. Update to 1.4.6: fixes CVE-2025-13654 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Fedora: Security Advisory (FEDORA-2025-4d1c51d90a)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for duc (moderate)
openSUSE Security Update: Security update for duc Announcement ID: openSUSE-SU-2025:0487-1 Rating: moderate References: 1254566 Cross-References: CVE-2025-13654 CVSS scores: CVE-2025-13654 SUSE: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP7 An...
duc-1.4.6-1.1 on GA media (moderate)
duc-1.4.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:15835-1 Rating: moderate Cross-References: CVE-2025-13654 CVSS scores: CVE-2025-13654 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
DEBIAN-CVE-2025-13654
A stack buffer overflow vulnerability exists in the bufferget function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read...
CVE-2025-13654
A stack buffer overflow vulnerability exists in the bufferget function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read...
CVE-2025-13654
creationtimestamp| type| source ---|---|--- 2025-12-05 13:14:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7akwlc2xc26 2025-12-05 14:15:41+00:00| seen| https://gist.github.com/Darkcrai86/e6dd16a1282f1df81b80875ca4a3f8a1 2025-12-08 03:13:27+00:00| seen|...
CVE-2025-13654 CVE-2025-13654
A stack buffer overflow vulnerability exists in the bufferget function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read...
Duc contains a stack buffer overflow vulnerability in the buffer_get function, allowing for out-of-bounds memory read
Overview Duc, an open-source disk management tool, contains a stack-based buffer overflow vulnerability allowing for out-of-bounds memory read. An attacker can exploit this vulnerability through malformed input data, and can cause the tool to either crash or cause it to disclose portions of memor...
CVE-2024-13654
creationtimestamp| type| source ---|---|--- 2025-02-12 04:45:12+00:00| seen| https://infosec.exchange/users/cve/statuses/113989092128308032 2025-02-12 05:15:50+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg6hputm2x 2025-02-12 06:48:41+00:00| seen|...
CVE-2024-13654 ZoxPress - The All-In-One WordPress News Theme <= 2.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Deletion
The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'resetoptions' function in all versions up to, and including, 2.12.0. This makes it possible for...
CVE-2020-13654
creationtimestamp| type| source ---|---|--- 2020-12-31 07:31:22+00:00| seen| https://t.me/cibsecurity/21446 2026-03-30 21:00:05+00:00| published-proof-of-concept| Telegram/GaMGzk6quMfkMjAkzI4lSk6nx3GpyIi67KywiajpwVCnbkI...
CVE-2020-13654
CVE-2020-13654 affects XWiki Platform prior to 12.8, where the property displayer mishandles escaping. The root cause is improper escaping in the property displayer, with impact stated as confidentially high/partial and no explicit exploitation details in the provided materials. Remediation refer...
CVE-2017-13654
CVE-2017-13654 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-13654
The CVE-2018-13654 entry concerns ESTSToken, an Ethereum token. The vulnerability is in the mintToken function of its smart contract, described as an integer overflow that lets the contract owner set an arbitrary user’s balance to any value. Documents confirm this root cause and the affected comp...