Lucene search
+L

325 matches found

AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.7 views

Astra Linux – Vulnerability in gst-plugins-good1.0

In GStreamer through 1.26.1, the isomp4 plugin’s qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, potentially leading to information disclosure...

8.1CVSS6.7AI score0.00625EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/10/28 4:41 p.m.10 views

Security Bulletin: Allocation of resources without limits, heap-buffer-overread, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency service is vulnerable to allocation of resources without limits, heap-buffer-overread, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-32988 DESCRIPTION: A flaw was found in GnuTLS. A double-free vulnerability...

9.8CVSS7.6AI score0.01244EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2025/10/06 8:50 a.m.14 views

gnutls: Vulnerability in GnuTLS SCT extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS7AI score0.01237EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-20927

Malicious code in bioql PyPI...

5.3CVSS6.2AI score0.01237EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/26 4:30 p.m.8 views

CVE-2025-11010

A flaw was found in the libucl library. A heap-based buffer over-read can be triggered when a specially crafted configuration file is processed, causing a crash to the application linked to the library and resulting in a denial of service...

5.3CVSS6.6AI score0.00159EPSS
SaveExploits0References2
SUSE Linux
SUSE Linux
added 2025/09/17 10:52 a.m.8 views

Security update for raptor

This update for raptor fixes the following issues: CVE-2024-57823: Fixed integer underflow when normalizing a URI with the turtle parser bsc1235673 CVE-2024-57822: Fixed heap buffer overread when parsing triples with the nquads parser bsc1235674 Patch Instructions: To install this SUSE update use...

6.9CVSS7.3AI score0.00322EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-6621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stb stbtruetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT. CVE-2020-6621 Note that Nessus relies on the presence of the package as reported b...

8.8CVSS7.1AI score0.01143EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2020-11894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ming aka libming 0.4.8 has a heap-based buffer over-read 8 bytes in the function decompileIF in decompile.c. CVE-2020-11894 Note that Nessus relies on the...

9.1CVSS8.4AI score0.01702EPSS
SaveExploits1References2
OSV
OSV
added 2025/08/07 12:00 a.m.12 views

CVE-2025-47183

In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure...

6.6CVSS6.2AI score
SaveExploits0References4
OSV
OSV
added 2025/08/07 12:00 a.m.5 views

CVE-2025-47219

In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetrak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure...

8.1CVSS6.9AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:00 a.m.4 views

CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32989)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT...

5.3CVSS6.4AI score0.01237EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:00 a.m.6 views

Azure Linux 3.0 Security Update: gnutls (CVE-2025-32989)

The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT...

5.3CVSS6.4AI score0.01237EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/10 8:15 a.m.9 views

CVE-2025-32989

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS5.5AI score
SaveExploits0References10
NVD
NVD
added 2025/07/10 8:15 a.m.9 views

CVE-2025-32989

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS0.01237EPSS
SaveExploits0References13
OSV
OSV
added 2025/07/10 8:15 a.m.18 views

AZL-65088 CVE-2025-32989 affecting package gnutls for versions less than 3.7.11-4

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS6.8AI score0.01237EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 8:15 a.m.8 views

ALPINE-CVE-2025-32989

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS6.3AI score0.01237EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 8:15 a.m.4 views

DEBIAN-CVE-2025-32989

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS6.8AI score0.01237EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 8:15 a.m.14 views

AZL-65103 CVE-2025-32989 affecting package gnutls for versions less than 3.8.3-6

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS6.8AI score0.01237EPSS
SaveExploits0References1
CVE
CVE
added 2025/07/10 8:05 a.m.105 views

CVE-2025-32989

CVE-2025-32989 : A heap-buffer-overread in GnuTLS occurs during X.509 certificate parsing of the CT SCT extension (OID 1.3.6.1.4.1.11129.2.4.2). A malformed SCT can lead to exposure of confidential data when certificates are validated for certain sites and SCT checks are not performed correctly. ...

5.3CVSS6.4AI score0.01237EPSS
SaveExploits0References13Affected Software1
Cvelist
Cvelist
added 2025/07/10 8:05 a.m.63 views

CVE-2025-32989 Gnutls: vulnerability in gnutls sct extension parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT Signed Certificate Timestamp SCT extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension OID...

5.3CVSS0.01237EPSS
SaveExploits0References11
Rows per page
Query Builder