Lucene search
+L

776 matches found

Cvelist
Cvelist
•added 2025/12/08 12:46 a.m.•42 views

CVE-2025-40294 Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix OOB access in parseadvmonitorpattern In the parseadvmonitorpattern function, the value of the 'length' variable is currently limited to HCIMAXEXTADLENGTH251. The size of the 'value' array in the mgmtadvpatter...

0.00201EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/08 12:00 a.m.•19 views

PT-2025-49427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s Bluetooth implementation within the parse adv monitor pattern function. The issue involves a potential out-of-bounds access when copying data into the...

4.6CVSS6.3AI score0.00201EPSS
SaveExploits0
NVD
NVD
•added 2025/12/02 9:15 a.m.•10 views

CVE-2025-10543

In Eclipse Paho Go MQTT v3.1 library paho.mqtt.golang versions =1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds 65535 bytes. This may lead to unexpected content in packets sent to the server for example, part of an MQTT topic may leak into...

6.3CVSS0.00227EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/02 12:00 a.m.•17 views

Eclipse Paho Go MQTT v3.1 library 安全漏洞

Eclipse Paho Go MQTT v3.1 library is a Go language software library from the Eclipse Foundation. A security vulnerability exists in Eclipse Paho Go MQTT v3.1 library version 1.5.0 and prior versions, which originates from an overflow during unchecked data-length conversion and could lead to the...

6.3CVSS6.4AI score0.00227EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/26 6:15 a.m.•11 views

CVE-2025-9558

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

7.6CVSS0.00189EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/11/13 12:00 a.m.•15 views

Apple macOS USD importMeshes Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

7.8CVSS7.4AI score0.00936EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/11/13 12:00 a.m.•13 views

Apple macOS USD importMeshJointWeights Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the USD library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the USD library. T...

7.8CVSS7.4AI score0.0021EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/11/12 8:15 a.m.•12 views

kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

8.1CVSS6.9AI score0.00239EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2025/11/11 12:00 a.m.•17 views

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.00194EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•7 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: netfs: Fixed an oops in write-retry due to accidentally resetting the subreq iterator. Fixed the resetting of the subrequest iterator in netfsretrywritestream, by using the iterator-reset function, as the iterator might have...

9.8CVSS6.3AI score0.00415EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•8 views

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from not properly validating the length of user-supplied data when parsing XWD files, which could lead to a heap buffer overflow and remote code execution...

7.8CVSS8AI score0.00537EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•11 views

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from a failure to properly validate the length of user-supplied data when parsing ILBM files, which could lead to remote code execution...

7.8CVSS7.8AI score0.02814EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•8 views

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from not properly validating the length of user-supplied data when parsing a DCM file, which could lead to a heap buffer overflow and remote code execution...

7.8CVSS8AI score0.00765EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/29 12:00 a.m.•7 views

GIMP 安全漏洞

GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from not properly validating the length of user-supplied data when parsing HDR files, which could lead to a heap buffer overflow and remote code execution...

7.8CVSS8AI score0.00537EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/08 12:30 p.m.•13 views

EUVD-2025-31823

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-24916

Malware in sbrugna...

7.8CVSS7.5AI score0.00658EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2016-7596

Malware in sbrugna...

9.8CVSS9.5AI score0.00949EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2019-2424

Malware in sbrugna...

7.8CVSS7.6AI score0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2020-7074

Malware in sbrugna...

9.8CVSS9.3AI score0.01375EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2021-24897

Malware in sbrugna...

9.8CVSS9.1AI score0.0268EPSS
SaveExploits0References3
Rows per page
Query Builder