Lucene search
+L

1010 matches found

Cvelist
Cvelist
•added 2025/09/26 1:32 p.m.•28 views

CVE-2025-11015 OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has bee...

5.3CVSS0.00145EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/09/26 1:32 p.m.•3 views

CVE-2025-11015 OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has bee...

5.3CVSS6.1AI score0.00145EPSS
SaveExploits0References5
OSV
OSV
•added 2025/09/26 1:15 p.m.•13 views

UBUNTU-CVE-2025-11014

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible...

7.8CVSS5.8AI score0.00241EPSS
SaveExploits1References7
Snyk
Snyk
•added 2025/09/26 12:43 p.m.•10 views

Heap-based Buffer Overflow

Overview ogre-python is an Object-Oriented Graphics Rendering Engine - python package Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the stbiwencodepngline function. An attacker can execute arbitrary code or cause a denial of service by providing specially craft...

7.8CVSS7.8AI score0.00241EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/09/26 12:43 p.m.•3 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the stbiwencodepngline function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input to the affected process. Remediation There is no fixed version for...

5.3CVSS7.8AI score0.00241EPSS
SaveExploits1References2
CVE
CVE
•added 2025/09/26 12:02 p.m.•41 views

CVE-2025-11014

CVE-2025-11014 affects OGRECave OGRE up to 14.4.1, specifically the function STBIImageCodec::encode in OgreSTBICodec.cpp under the Image Handler. The issue is a heap-based buffer overflow, exploitable via local access, with an exploit publicly released. Several connected sources (Snyk entries and...

7.8CVSS6.3AI score0.00241EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2025/09/26 12:02 p.m.•14 views

CVE-2025-11014

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible...

7.8CVSS5.5AI score0.00241EPSS
SaveExploits1
OSV
OSV
•added 2025/09/26 12:02 p.m.•12 views

CVE-2025-11014 OGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible...

4.8CVSS6.1AI score
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2025/09/08 12:00 a.m.•4 views

The vulnerability of the OpenJPEG library for image encoding and decoding, related to the pointer to zero, allows a malicious actor to trigger a service failure.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the assignment of a null pointer in the openjp2/dwt.c file. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

6.5CVSS7AI score0.00262EPSS
SaveExploits0References15Affected Software10
Positive Technologies
Positive Technologies
•added 2025/09/08 12:00 a.m.•15 views

PT-2025-46762

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The btrfs encode fh function does not properly account for all cases it handles, potentially leading to an out-of-bounds write. Specifically, when a parent exists and the root ID of the...

4.6CVSS7.9AI score0.00143EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/05 5:10 p.m.•7 views

Malicious code in zero-static-scale-minify-encode (npm)

The package zero-static-scale-minify-encode was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
•added 2025/09/05 5:10 p.m.•5 views

MAL-2025-46879 Malicious code in zero-static-scale-minify-encode (npm)

The package zero-static-scale-minify-encode was found to contain malicious code...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/09/04 6:39 a.m.•17 views

HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow

...

4.8CVSS7AI score0.00229EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/09/04 6:35 a.m.•14 views

Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions

...

9.8CVSS7AI score0.01472EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/09/01 9:32 p.m.•11 views

CVE-2025-9796 thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting

A vulnerability was found in thinkgem JeeSite up to 5.12.1. This affects the function decodeUrl2 of the file common/src/main/java/com/jeesite/common/codec/EncodeUtils.java. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made...

5.1CVSS5.5AI score0.00364EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/09/01 12:00 a.m.•16 views

Thinkgem JeeSite 安全漏洞

Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform of China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...

5.1CVSS4.3AI score0.00364EPSS
SaveExploits1References9
OSV
OSV
•added 2025/09/01 12:00 a.m.•13 views

PUB-A-394583415

In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2020-21548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c. CVE-2020-21548 Note that Nessus relies on the presence o...

8.8CVSS7.9AI score0.01069EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/08/19 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2021-36770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working...

7.8CVSS7.1AI score0.01392EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•9 views

Malicious code in easy-encode-notify-emulate-cache (npm)

The package easy-encode-notify-emulate-cache was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder