Lucene search
+L

5291 matches found

RedhatCVE
RedhatCVE
added 2025/12/15 1:25 p.m.7 views

CVE-2025-14660

A flaw has been found in DecoCMS Mesh up to 1.0.0-alpha.31. Affected by this vulnerability is the function createTool of the file packages/sdk/src/mcp/teams/api.ts of the component Workspace Domain Handler. This manipulation of the argument domain causes improper access controls. The attack can b...

6.3CVSS6.2AI score0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.12 views

PT-2025-51162

A flaw has been found in DecoCMS Mesh up to 1.0.0-alpha.31. Affected by this vulnerability is the function createTool of the file packages/sdk/src/mcp/teams/api.ts of the component Workspace Domain Handler. This manipulation of the argument domain causes improper access controls. The attack can b...

6.3CVSS6.2AI score0.00316EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2025/12/13 8:02 p.m.9 views

CVE-2024-58311

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS6.8AI score0.00408EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/12 8:15 p.m.10 views

CVE-2024-58311

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

9.8CVSS0.00408EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/12 7:57 p.m.16 views

CVE-2024-58311

Dormakaba Saflok System 6000 is affected by CVE-2024-58311 due to a predictable key generation algorithm that lets an attacker derive card access keys from a 32-bit card identifier. The underlying issue is a deterministic key derivation process, enabling key computation without requiring addition...

9.8CVSS6.5AI score0.00408EPSS
SaveExploits0References3
Circl
Circl
added 2025/12/12 7:32 p.m.10 views

CVE-2025-65530

creationtimestamp| type| source ---|---|--- 2025-12-12 19:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7std6b6aw2r 2026-01-07 00:07:35+00:00| seen| https://gist.github.com/aleksejspopovs/a5f757871c6bd16fab471e5cdd231061 2026-01-09 12:34:22+00:00| seen|...

8.8CVSS5.7AI score0.00293EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.4 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991152)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991152 advisory. In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTRRECORDs Kernel iterates over ATTRRECORDs in mft record in...

5.5CVSS6AI score0.00205EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.6 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991113)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991113 advisory. In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem...

5.5CVSS6.1AI score0.0026EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.9 views

EulerOS 2.0 SP11 : libssh (EulerOS-SA-2025-2484)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash...

4.7CVSS6.4AI score0.00402EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:00 a.m.7 views

EulerOS 2.0 SP11 : libssh (EulerOS-SA-2025-2465)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash...

4.7CVSS6.4AI score0.00402EPSS
SaveExploits0References5
CVE
CVE
added 2025/12/10 10:04 p.m.65 views

CVE-2025-66628

CVE-2025-66628 affects ImageMagick’s TIM image parser (ReadTIMImage in coders/tim.c). In versions up to 7.1.2-9, width/height are read as 16-bit values and image_size = 2 * width * height can overflow on 32-bit systems, causing a small heap allocation and enabling an out-of-bounds read. This is m...

7.5CVSS6.9AI score0.00498EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2025/12/10 3:47 p.m.13 views

ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

Summary The TIM PSX TIM image parser in ImageMagick contains a critical integer overflow vulnerability in the ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file header and calculates imagesize = 2 width height without checking for overflow. On 32-bit...

7.5CVSS7.4AI score0.00498EPSS
SaveExploits0References3Affected Software6
Snyk
Snyk
added 2025/12/10 3:47 p.m.3 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ReadTIMImage function. An attacker can access sensitive memory contents by supplying a specially crafted TIM image file with large width and height values, causing an integer overflow and subsequent out-of-boun...

8.7CVSS6.9AI score0.00498EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/09 3:31 a.m.12 views

EUVD-2023-60128

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Clean up integer overflow checking in mapuserpages The encodedma function has some validation on intrans-size but it would be more clear to move those checks to findandmapuserpages. The encodedma had two checks: if...

6AI score0.00141EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/09 12:00 a.m.10 views

CVE-2023-53778 accel/qaic: Clean up integer overflow checking in map_user_pages()

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Clean up integer overflow checking in mapuserpages The encodedma function has some validation on intrans-size but it would be more clear to move those checks to findandmapuserpages. The encodedma had two checks: if...

7.8CVSS6.5AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.9 views

PT-2025-50160

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description The issue involves multiple local privilege escalation flaws within Microsoft Windows. A heap-based buffer overflow exists in Windows Win32K - GRFX, potentially allowing an...

7.8CVSS6AI score0.00667EPSS
SaveExploits0References15
OSV
OSV
added 2025/12/05 10:51 a.m.21 views

USN-7909-4 linux-gcp, linux-gke, linux-gkeop vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

9.8CVSS6.5AI score0.00617EPSS
SaveExploits3References179
Ubuntu
Ubuntu
added 2025/12/04 9:26 a.m.25 views

USN-7909-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

9.8CVSS7.2AI score0.00617EPSS
SaveExploits3
NVD
NVD
added 2025/12/01 7:15 p.m.11 views

CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

8.6CVSS0.00162EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/01 7:15 p.m.9 views

CVE-2025-34297

KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft parameter is not validated before being used in a size calculation sizeofkissfftcpx nfft - 1, which can wrap to a small value when nfft is large...

8.6CVSS6.1AI score0.00162EPSS
SaveExploits0References2
Rows per page
Query Builder