Lucene search
+L

17 matches found

OSV
OSV
added 2026/07/19 3:48 a.m.6 views

OESA-2026-3040 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.5CVSS5.2AI score0.00353EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/09 12:49 p.m.7 views

OESA-2026-2888 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

7.5CVSS6AI score0.00353EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/01 6:3 a.m.10 views

BELL-CVE-2026-14164

Bulletin has no description...

7.5CVSS6.1AI score0.00353EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-14164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stal...

7.5CVSS5.8AI score0.00353EPSS
SaveExploits0References4
Circl
Circl
added 2025/12/20 7:39 a.m.9 views

CVE-2025-14164

creationtimestamp| type| source ---|---|--- 2025-12-20 07:39:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mafpadny6b2q 2025-12-20 10:57:35+00:00| seen| https://gist.github.com/Darkcrai86/a0db3a4a67a370a31386f63485cea37c...

4.3CVSS5.7AI score0.00131EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/20 3:20 a.m.16 views

CVE-2025-14164

Technical details about CVE-2025-14164 are not publicly provided in the supplied documents. The initial description mentions a CSRF vulnerability in Quran Gateway for WordPress up to version 1.5, but no further technical specifics are available here.

4.3CVSS5AI score0.00131EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/12/19 10:5 p.m.12 views

WordPress Quran Gateway plugin <= 1.5 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Quran Gateway versions = 1.5...

4.3CVSS6.8AI score0.00131EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.27 views

Mageia: Security Advisory (MGASA-2017-0481)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.7AI score0.05652EPSS
SaveExploits1References4
CVE
CVE
added 2021/12/20 10:44 p.m.29 views

CVE-2019-14164

CVE-2019-14164 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
CVE
CVE
added 2020/07/01 1:35 a.m.76 views

CVE-2020-14164

CVE-2020-14164 affects Atlassian Jira Server/Data Center with a vulnerability in the WYSIWYG editor that allows remote attackers to inject arbitrary HTML/JavaScript by pasting code into the editor. Affected versions are Jira Server/Data Center before 8.8.2; fixed in 8.5.9, 8.8.2, and 8.9.0. Jira ...

6.1CVSS6AI score0.00732EPSS
SaveExploits0References1Affected Software2
Atlassian
Atlassian
added 2020/06/16 2:46 a.m.36 views

XSS in WYSIWYG editor via pasted code - CVE-2020-14164

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the WYSIWYG editor. The affected versions are before 8.5.9, and from version 8.6.0 before 8.8.2. Affected versions: version...

6.1CVSS4.8AI score0.00732EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2017/10/06 12:0 a.m.29 views

SUSE SLED12 / SLES12 Security Update : openjpeg2 (SUSE-SU-2017:2649-1)

This update for openjpeg2 fixes several issues. These security issues were fixed : - CVE-2016-10507: Integer overflow vulnerability in the bmp24toimage function allowed remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file bsc105642...

8.8CVSS7.9AI score0.05652EPSS
SaveExploits1References16
RedhatCVE
RedhatCVE
added 2017/09/08 1:30 p.m.42 views

CVE-2017-14164

A size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c or possibly remote code execution...

8.8CVSS4.8AI score0.05437EPSS
SaveExploits1References1
OSV
OSV
added 2017/09/06 6:29 p.m.29 views

CVE-2017-14164

A size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c or possibly remote code execution...

8.8CVSS9.3AI score
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2017/09/06 6:0 p.m.62 views

CVE-2017-14164

A size-validation issue was discovered in opjj2kwritesot in lib/openjp2/j2k.c in OpenJPEG 2.2.0. The vulnerability causes an out-of-bounds write, which may lead to remote denial of service heap-based buffer overflow affecting opjwritebytesLE in lib/openjp2/cio.c or possibly remote code execution...

8.8CVSS9.4AI score0.05437EPSS
SaveExploits1
CVE
CVE
added 2017/09/06 6:0 p.m.105 views

CVE-2017-14164

OpenJPEG 2.2.0 contains a size-validation flaw in opj_j2k_write_sot (lib/openjp2/j2k.c) that can cause an out-of-bounds write, leading to remote denial of service or possibly remote code execution. This CVE-2017-14164 is one of several vulnerabilities reported in OpenJPEG; upstream advisories not...

8.8CVSS9.2AI score0.05437EPSS
SaveExploits1References5Affected Software1
Openbugbounty
Openbugbounty
added 2016/12/08 2:23 p.m.12 views

atlantico.fr XSS vulnerability

Vulnerable URL: http://www.atlantico.fr/search/site/xxx%22%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14164 VIP website status:...

6.3AI score
SaveExploits0
Rows per page
Query Builder