Lucene search
+L

16082 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/26 12:00 a.m.•5 views

CVE-2025-59362: Stack-based Buffer Overflow

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

4CVSS5.6AI score0.00408EPSS
SaveExploits1References1
Mend
Mend
•added 2025/09/26 12:00 a.m.•6 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

5.1CVSS5.6AI score0.00408EPSS
SaveExploits1References4
CVE
CVE
•added 2025/09/26 12:00 a.m.•132 views

CVE-2025-59362

The Squid caching proxy (versions through 7.1 ) is vulnerable to a stack-based buffer overflow due to the mishandling of ASN.1 encoding for long SNMP OIDs. The root cause is located in the asn_build_objid function within lib/snmplib/asn1.c. This vulnerability can lead to low availability impacts ...

4CVSS5.6AI score0.00408EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/09/26 12:00 a.m.•37 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

0.00408EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/09/26 12:00 a.m.•18 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

4CVSS7AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/09/26 12:00 a.m.•14 views

Squid security vulnerabilities

Squid is a suite of proxy server and web caching server software from Squid open source. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. A security vulnerability exists in Squid 7.1 and earlier versions, which stems from improper...

4CVSS5.5AI score0.00408EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2025/09/26 12:00 a.m.•19 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

4CVSS5.6AI score0.00408EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/25 3:48 p.m.•18 views

CVE-2025-47327

Memory corruption while encoding the image data...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:54 a.m.•16 views

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

6.5CVSS5.8AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:53 a.m.•15 views

CVE-2025-0209

A reflected cross-site scripting XSS vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of...

6.1CVSS5.9AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/25 12:00 a.m.•36 views

CVE-2025-60249

vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting XSS vulnerability was discovered in the handling of user-supplied input in the Bundles, Comments, and...

6.4CVSS0.00203EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/25 12:00 a.m.•38 views

CVE-2025-60249

CVE-2025-60249 affects vulnerability-lookup 2.16.0 and enables XSS via Bundles, Comments, and Sightings components (bundle.py, comment.py, user.py). The root cause is unsafe handling of user-supplied input, with untrusted data rendered in templates/tables due to innerHTML usage and insufficient v...

6.4CVSS5.5AI score0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•26 views

PT-2025-39430

Name of the Vulnerable Software and Affected Versions vulnerability-lookup version 2.16.0 Description A cross-site scripting XSS issue exists in the handling of user-supplied input within the Bundles, Comments, and Sightings components of the software. Untrusted data was not properly sanitized...

6.4CVSS5.6AI score0.00203EPSS
SaveExploits0References5
NVD
NVD
•added 2025/09/24 4:15 p.m.•30 views

CVE-2025-47327

Memory corruption while encoding the image data...

7.8CVSS0.00089EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/24 3:33 p.m.•8 views

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/24 3:33 p.m.•36 views

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

7.8CVSS0.00089EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/24 3:33 p.m.•56 views

CVE-2025-47327

CVE-2025-47327 describes a memory-corruption issue during image data encoding affecting Qualcomm chipsets. The vulnerability’s root cause is memory corruption in the image encoding path, with the NVD/CVE records noting a high-severity risk (CVSS v3.1: Local attack, low complexity, no user interac...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2025/09/24 2:15 p.m.•16 views

UBUNTU-CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0References3
CVE
CVE
•added 2025/09/24 1:12 p.m.•62 views

CVE-2025-23274

The CVE-2025-23274 entry concerns NVIDIA nvJPEG in the CUDA Toolkit. The vulnerability is an out-of-bounds read in the jpeg encoding path triggered by a specially crafted input image, where dimensions cause integer overflows in array index calculations. This may lead to a denial of service. Root ...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/09/24 1:12 p.m.•16 views

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0
Rows per page
Query Builder