Lucene search
+L

22803 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:33 p.m.15 views

CVE-2020-27485

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter fails to check the index...

9.9CVSS6.8AI score0.01696EPSS
SaveExploits1
CVE
CVE
added 2025/05/22 5:25 p.m.215 views

CVE-2025-48075

Summary: The CVE-2025-48075 entry concerns the GoFiber (fiber) web framework. Starting in versions 2.52.6 and earlier than 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using key[idx]value syntax; if idx is negative, it panics instead of returning an error, potentially causing d...

8.7CVSS6.5AI score0.00502EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/05/22 5:25 p.m.62 views

CVE-2025-48075 Fiber panics when fiber.Ctx.BodyParser parses invalid range index

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...

8.7CVSS0.00502EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:25 p.m.14 views

CVE-2020-11223

Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS7.8AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:24 p.m.11 views

CVE-2020-11174

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

7.8CVSS7.8AI score0.0019EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:51 p.m.8 views

CVE-2020-8641

Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php pageslug parameter...

8.8CVSS6.8AI score0.10808EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:33 p.m.11 views

CVE-2020-26041

An issue was discovered in Hoosk CmS v1.8.0. There is an Remote Code Execution vulnerability in install/index.php...

9.8CVSS7.6AI score0.02756EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:23 p.m.17 views

CVE-2020-29242

dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame...

6.5CVSS6.8AI score0.0112EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:03 p.m.15 views

CVE-2020-26043

An issue was discovered in Hoosk CMS v1.8.0. There is a XSS vulnerability in install/index.php...

6.1CVSS6AI score0.007EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:56 p.m.21 views

CVE-2020-18428

tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS...

7.5CVSS7.1AI score0.01233EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:56 p.m.18 views

CVE-2020-6623

stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...

8.8CVSS6.9AI score0.01454EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:35 p.m.13 views

CVE-2020-3654

u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in Agatti,...

10CVSS7.4AI score0.00902EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:27 p.m.13 views

CVE-2020-27483

Garmin Forerunner 235 before 8.20 is affected by: Array index error. The component is: ConnectIQ TVM. The attack vector is: To exploit the vulnerability, the attacker must upload a malicious ConnectIQ application to the ConnectIQ store. The ConnectIQ program interpreter trusts the offset provided...

9.9CVSS7.3AI score0.02146EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:13 p.m.16 views

CVE-2020-14212

FFmpeg through 4.3 has a heap-based buffer overflow in aviogetstr in libavformat/aviobuf.c because dnnbackendnative.c calls ffdnnloadmodelnative and a certain index check is omitted...

8.8CVSS7.3AI score0.01655EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:07 p.m.14 views

CVE-2020-7187

A reportpage index expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center iMC versions: Prior to iMC PLAT 7.3 E0705P07...

9CVSS8AI score0.03353EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:03 p.m.12 views

CVE-2018-11936

Index of array is processed in a wrong way inside a while loop and result in invalid index -1 or something else leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS7.1AI score0.00935EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:53 p.m.18 views

CVE-2018-13898

Out-of-Bounds write due to incorrect array index check in PMIC in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607, MDM9650, MDM9655,...

9.8CVSS7AI score0.00733EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/22 12:34 p.m.7 views

Malicious code in ypj (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/05/22 12:34 p.m.8 views

MAL-2025-4274 Malicious code in ypj (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/22 12:33 p.m.10 views

Malicious code in web3-validators (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
Rows per page
Query Builder