Lucene search
K

11161 matches found

CNNVD
CNNVD
added 2025/10/09 12:0 a.m.2 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that could result in a denial of service when processing IOCTL calls for image encoding...

5.5CVSS6.6AI score0.00017EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.1 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when processing image encoding completion events...

7.8CVSS6.9AI score0.00018EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.4 views

PT-2025-41341

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A temporary denial of service can occur when processing an IOCTL call for image encoding. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

5.5CVSS6.4AI score0.00017EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.2 views

PT-2025-41348

Name of the Vulnerable Software and Affected Versions Versions prior to 2.3 Description A memory corruption issue exists when processing an image encoding completion event. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

7.8CVSS6.5AI score0.00018EPSS
Exploits0References5
OSV
OSV
added 2025/10/08 5:12 p.m.1 views

USN-7812-1 imagemagick vulnerabilities

Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that ImageMagick did not properly sanitize image file names. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. CVE-2025-55298 Lumina Mescuwa discovered that...

8.8CVSS7.3AI score0.01005EPSS
Exploits2References3
Ubuntu
Ubuntu
added 2025/10/08 5:12 p.m.2 views

USN-7812-1: ImageMagick vulnerabilities

Woojin Park, Hojun Lee, Yougin Won and Siyeon Han discovered that ImageMagick did not properly sanitize image file names. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information, or execute arbitrary code. CVE-2025-55298 Lumina Mescuwa discovered that...

8.8CVSS7.6AI score0.01005EPSS
Exploits2
RedHat Linux
RedHat Linux
added 2025/10/08 2:48 p.m.7 views

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

7.5CVSS7.1AI score0.00097EPSS
Exploits1References11
SUSE CVE
SUSE CVE
added 2025/10/07 11:25 p.m.2 views

SUSE CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

6.4CVSS8.4AI score0.00837EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 7:31 p.m.2 views

EUVD-2025-32887

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.5AI score0.00075EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:55 p.m.3 views

EUVD-2025-32549

python-socketio vulnerable to arbitrary Python code execution RCE through malicious pickle deserialization in certain multi-server deployments...

6.4CVSS7.2AI score0.00837EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2025/10/07 11:34 a.m.3 views

Security update for rubygem-puma

This update for rubygem-puma fixes the following issues: Update to version 5.6.9. CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks bsc1230848, fixed in an earlier update. CVE-2024-21647: unbounded resource consumpti...

7.3CVSS6.8AI score0.0246EPSS
Exploits0References12
OSV
OSV
added 2025/10/07 11:34 a.m.0 views

SUSE-SU-2025:03467-1 Security update for rubygem-puma

This update for rubygem-puma fixes the following issues: Update to version 5.6.9. - CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks bsc1230848, fixed in an earlier update. - CVE-2024-21647: unbounded resource...

9.8CVSS6.4AI score0.0246EPSS
Exploits0References7
OSV
OSV
added 2025/10/07 11:33 a.m.0 views

SUSE-SU-2025:03466-1 Security update for rubygem-puma

This update for rubygem-puma fixes the following issues: Update to version 5.6.9. - CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks bsc1230848, fixed in an earlier update. - CVE-2024-21647: unbounded resource...

9.8CVSS6.4AI score0.0246EPSS
Exploits0References7
SUSE Linux
SUSE Linux
added 2025/10/07 11:33 a.m.3 views

Security update for rubygem-puma

This update for rubygem-puma fixes the following issues: Update to version 5.6.9. CVE-2024-45614: improper header normalization allows for clients to clobber proxy set headers, which can lead to information leaks bsc1230848, fixed in an earlier update. CVE-2024-21647: unbounded resource consumpti...

7.3CVSS6.8AI score0.0246EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2025/10/07 9:27 a.m.4 views

CVE-2025-0607

Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing. This issue affects Logo Cloud: before 2.57...

4.3CVSS5.4AI score0.00033EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/07 6:9 a.m.13 views

CVE-2025-9703

The Ultimate Addons for Elementor Formerly Elementor Header & Footer Builder WordPress plugin before 2.5.0 does not sanitize SVG file contents when uploaded through the xmlrpc.php endpoint using base64 encode, leading to a Cross-Site Scripting vulnerability...

4.3CVSS6.2AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-15202

Malware in sbrugna...

7.8CVSS4.1AI score0.00057EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19371

Malware in sbrugna...

6.1CVSS5.9AI score0.003EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-14265

Malware in sbrugna...

5.4CVSS5.5AI score0.00281EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-2401

Malware in sbrugna...

7CVSS6.9AI score0.00054EPSS
Exploits1References2
Rows per page
Query Builder