Lucene search
+L

255 matches found

CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•16 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

4CVSS6.9AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•13 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

3.3CVSS7AI score0.00092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-53172: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS5.9AI score0.00093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-53175: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS5.9AI score0.00093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-53176: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

3.3CVSS5.9AI score0.00092EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2025-53173: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

5.3CVSS5.9AI score0.00211EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•2 views

CVE-2024-58117: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS5.9AI score0.00093EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•6 views

CVE-2025-53171: Stack-based Buffer Overflow

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

4CVSS5.9AI score0.00093EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•16 views

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

4CVSS7AI score0.00093EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•15 views

PT-2025-28108 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A stack overflow risk exists when vector images are parsed during file preview. Successful exploitation of this issue may affect the file preview function. Recommendations: At the moment,...

4CVSS6.6AI score0.00093EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•27 views

PT-2025-28106 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a risk of stack overflow when vector images are parsed during file preview. The impact of successful exploitation of this issue may affect the file preview function. Recommendations...

5.3CVSS6.6AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•13 views

PT-2025-28099 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A stack overflow risk exists when vector images are parsed during file preview. Successful exploitation of this issue may affect the file preview function. Recommendations: At the moment,...

4CVSS6.6AI score0.00093EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•14 views

PT-2025-28105 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a risk of stack overflow when vector images are parsed during file preview. Successful exploitation of this vulnerability may affect the file preview function...

4CVSS6.5AI score0.00093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•22 views

PT-2025-28107 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a risk of stack overflow when vector images are parsed during file preview. The impact of successful exploitation of this issue may affect the file preview function. Recommendations...

4CVSS6.6AI score0.00093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/07/05 12:00 a.m.•17 views

PT-2025-28104 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a risk of stack overflow when vector images are parsed during file preview. Successful exploitation of this vulnerability may affect the file preview function...

4CVSS6.5AI score0.00093EPSS
SaveExploits0References3
OSV
OSV
•added 2025/07/04 12:02 p.m.•16 views

CVE-2025-7066 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Jirafeau

Jirafeau normally prevents browser preview for text files due to the possibility that for example SVG and HTML documents could be exploited for cross site scripting. This was done by storing the MIME type of a file and allowing only browser preview for MIME types beginning with image except for...

6.1CVSS5.4AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/06/23 8:40 a.m.•18 views

CVE-2025-50183

OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in...

6.5CVSS7.2AI score0.00316EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/19 3:15 a.m.•46 views

CVE-2025-50183

OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. Th...

6.5CVSS0.00316EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/06/19 2:20 a.m.•7 views

CVE-2025-50183 OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. Th...

6.5CVSS6.2AI score0.00316EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/19 2:20 a.m.•18 views

CVE-2025-50183 OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

OpenList Frontend is a UI component for OpenList. Prior to version 4.0.0-rc.4, a vulnerability exists in the file preview/browsing feature of the application, where files with a .py extension that contain JavaScript code wrapped in tags may be interpreted and executed as HTML in certain modes. Th...

6.5CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder