Lucene search
K

7645 matches found

Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.6 views

PT-2025-37797

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26 Description An out-of-bounds read issue was addressed through improved bounds checking. This could allow an application to cause unexpected system termination. Recommendations Update to macOS Tahoe 26...

3.3CVSS5.4AI score0.00367EPSS
Exploits0References8
CNVD
CNVD
added 2025/08/28 12:0 a.m.2 views

libbiosig Stack Buffer Overflow Vulnerability

libbiosig is BioSig Project open source an open source software library for biomedical signal processing . With biological signal analysis functions. A stack buffer overflow vulnerability exists in libbiosig, which is caused by incorrect boundary checking of the MFER parsing function. An attacker...

9.8CVSS8.2AI score0.00649EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.1 views

Delta Electronics COMMGR 安全漏洞

Delta Electronics COMMGR is a communication management software from Delta Electronics China. Delta Electronics COMMGR suffers from a command injection vulnerability due to improper boundary checking when creating specially designed .isp files, no details of the vulnerability are available at thi...

8.6CVSS7.5AI score0.00376EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.5 views

CVE-2011-10024

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS8.2AI score0.00331EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.4 views

CVE-2011-10023

MJM QuickPlayer likely now referred to as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitra...

8.4CVSS8AI score0.00324EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 4:35 p.m.4 views

CVE-2011-10022

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception...

8.6CVSS8.1AI score0.00749EPSS
Exploits0References1
OSV
OSV
added 2025/08/22 11:36 a.m.5 views

OESA-2025-2071 microcode_ctl security update

Security Fixes: Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.CVE-2025-20053 Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR...

7.9CVSS6.9AI score0.00169EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.10 views

PT-2025-34103 · Undefined · Undefined

SPlayer version 3.7 and earlier is vulnerable to a stack-based buffer overflow when processing HTTP responses containing an overly long Content-Type header. The vulnerability occurs due to improper bounds checking on the header value, allowing an attacker to overwrite the Structured Exception...

8.6CVSS8.1AI score0.00749EPSS
Exploits0References6
OSV
OSV
added 2025/08/19 5:15 p.m.9 views

AZL-73857 CVE-2025-38574 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptpxmit Commit aabc6596ffb3 "net: ppp: Add bound checking for skb data on pppsynctxmung" fixed pppsynctxmunge We need a similar fix in pptpxmit, otherwise we might read uninit data as reported ...

7.8CVSS5.6AI score0.00167EPSS
Exploits0References1
OSV
OSV
added 2025/08/19 5:15 p.m.2 views

UBUNTU-CVE-2025-38574

In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptpxmit Commit aabc6596ffb3 "net: ppp: Add bound checking for skb data on pppsynctxmung" fixed pppsynctxmunge We need a similar fix in pptpxmit, otherwise we might read uninit data as reported ...

7.8CVSS6.5AI score0.00167EPSS
Exploits0References40
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2022-3786

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain...

7.5CVSS8.2AI score0.91153EPSS
Exploits2References2
Intel
Intel
added 2025/08/18 12:0 a.m.8 views

2025.3 IPU, Intel®  Xeon® Processor Firmware Advisory

Summary: Potential security vulnerabilities in the Intel® Xeon® Processors may allow escalation of privilege or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-20053 Description: Improper buffer restriction...

7.2CVSS7.2AI score0.00143EPSS
Exploits0
CNNVD
CNNVD
added 2025/08/15 12:0 a.m.2 views

WordPress plugin WooCommerce OTP Login With Phone Number, OTP Verification 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

8.1CVSS6.7AI score0.00598EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/08/14 6:24 p.m.2 views

CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS7.5AI score0.00134EPSS
Exploits0References1
Redos
Redos
added 2025/08/13 12:0 a.m.6 views

ROS-20250813-08

A vulnerability in the Java dnsjava DNS implementation is related to incorrect response checking during processing of DNS queries. Exploitation of the vulnerability could allow a remote attacker to bypass the implemented security restrictions. enforced security restrictions...

8.9CVSS7.4AI score0.00388EPSS
Exploits0
Redos
Redos
added 2025/08/13 12:0 a.m.6 views

ROS-20250813-07

A vulnerability in the Java dnsjava DNS implementation is related to incorrect response checking during processing of DNS queries. Exploitation of the vulnerability could allow a remote attacker to bypass the implemented security restrictions. enforced security restrictions...

8.9CVSS7.4AI score0.00388EPSS
Exploits0
Redos
Redos
added 2025/08/13 12:0 a.m.6 views

ROS-20250813-03

Vulnerabilities in the UEFI Firmware component of Intel processor firmware are related to input validation flaws. Exploitation of the vulnerability could allow an attacker to elevate their privileges A vulnerability in the Linux kernel mode driver for certain IntelR Ethernet network controllers a...

9.3CVSS7.5AI score0.00187EPSS
Exploits0
NVD
NVD
added 2025/08/12 5:15 p.m.4 views

CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS0.00134EPSS
Exploits0References2
OSV
OSV
added 2025/08/12 5:15 p.m.1 views

ALPINE-CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

7CVSS7AI score0.00134EPSS
Exploits0References1
OSV
OSV
added 2025/08/12 5:15 p.m.0 views

DEBIAN-CVE-2025-24305

Insufficient control flow management in the Alias Checking Trusted Module ACTM firmware for some IntelR XeonR processors may allow a privileged user to potentially enable escalation of privilege via local access...

7CVSS6.9AI score0.00134EPSS
Exploits0References1
Rows per page
Query Builder