Lucene search
+L

7504 matches found

osv_oesa
osv_oesa
•added 2026/02/13 11:10 a.m.•12 views

OESA-2026-1374 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

4.3CVSS6.2AI score0.00838EPSS
SaveExploits3References4
osv_oesa
osv_oesa
•added 2026/02/13 11:10 a.m.•13 views

OESA-2026-1375 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

4.3CVSS6.2AI score0.00838EPSS
SaveExploits3References4
osv_oesa
osv_oesa
•added 2026/02/13 11:10 a.m.•13 views

OESA-2026-1372 gimp security update

The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...

4.3CVSS6.2AI score0.00838EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/13 12:00 a.m.•11 views

CVE-2025-48021: Integer Underflow (Wrap or Wraparound)

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receives maliciously crafted packets, Vnet/IP software stack process may be terminated. The affected products and versions are as follows: Vnet/IP Interface Package for CENTU...

6.5CVSS5.7AI score0.0019EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/13 12:00 a.m.•10 views

CVE-2025-1924: Integer Underflow (Wrap or Wraparound)

A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation. If affected product receive maliciously crafted packets, a DoS attack may cause Vnet/IP communication functions to stop or arbitrary programs to be executed. The affected products and versions a...

8.2CVSS6.9AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/13 12:00 a.m.•32 views

PT-2026-14: Integer underflow leads to Remote Code Execution in Yokogawa Centum VP

The vulnerability was identified in Centum VP, versions R1.07.00 or earlier. The discovered vulnerability allows an attacker to achieve remote code execution via an integer underflow that lets malicious input manipulate internal calculations and trigger execution of the code. Vulnerability status...

8.2CVSS7.6AI score0.00205EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/11 11:11 a.m.•10 views

Integer Underflow (Wrap or Wraparound)

Overview Affected versions of this package are vulnerable to Integer Underflow Wrap or Wraparound via the process when handling zero-length resources. An attacker can access sensitive information or cause a denial of service by submitting specially crafted content. Remediation A fix was pushed in...

9.1CVSS6.7AI score0.00427EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/02/10 12:00 a.m.•10 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: raptor2 (UTSA-2026-005330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005330 advisory. In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath. Tenable has...

9.3CVSS7.5AI score0.00322EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2026/02/06 12:00 a.m.•15 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-005274)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005274 advisory. In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath. Tenable has...

9.3CVSS7.5AI score0.00322EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/02/05 7:23 p.m.•17 views

CVE-2026-25532

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

8CVSS5.7AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/04 6:16 p.m.•25 views

CVE-2026-25532

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

8CVSS0.00407EPSS
SaveExploits0References8
CVE
CVE
•added 2026/02/04 5:58 p.m.•105 views

CVE-2026-25532

CVE-2026-25532 affects Espressif ESP-IDF WPS Enrollee in versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6. A malformed EAP-WSC packet with truncated payload can trigger an integer underflow during fragment length calculation, when processing EAP-Expanded (WSC) messages. The frag_len calculation sub...

8CVSS5.7AI score0.00407EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2026/02/04 5:58 p.m.•19 views

CVE-2026-25532 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

6.3CVSS5.6AI score
SaveExploits0References10
attackerkb
attackerkb
•added 2026/02/04 5:58 p.m.•29 views

CVE-2026-25532

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

6.3CVSS5.7AI score0.00407EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2026/02/04 5:58 p.m.•49 views

CVE-2026-25532 ESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

6.3CVSS0.00407EPSS
SaveExploits0References8
osv_azl
osv_azl
•added 2026/02/04 5:16 p.m.•22 views

AZL-77130 CVE-2026-23069 affecting package kernel for versions less than 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtiotransportgetcredit The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer shrinks its advertise...

5.5CVSS6.2AI score0.00148EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•24 views

Espressif ESP-IDF 数字错误漏洞

Espressif ESP-IDF is an IoT development framework developed by Espressif, a Chinese company. Versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6 of Espressif ESP-IDF contain numerical error vulnerabilities. These vulnerabilities stem from integer underflow during the processing ofEAP-WSC packets in th...

8CVSS5.9AI score0.00407EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•29 views

PT-2026-6314

Name of the Vulnerable Software and Affected Versions Espressif Internet of Things IOT Development Framework versions 5.1.6 through 5.5.2 Description The Espressif Internet of Things IOT Development Framework contains a flaw in the WPS Wi-Fi Protected Setup Enrollee implementation. Malformed...

6.3CVSS5.8AI score0.00407EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•1 views

CVE-2026-23069: Integer Underflow (Wrap or Wraparound)

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtiotransportgetcredit The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer shrinks its advertise...

5.5CVSS6.2AI score0.00148EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/04 12:00 a.m.•6 views

CVE-2026-25532: Integer Underflow (Wrap or Wraparound)

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.2, 5.4.3, 5.3.4, 5.2.6, and 5.1.6, a vulnerability exists in the WPS Wi-Fi Protected Setup Enrollee implementation where malformed EAP-WSC packets with truncated payloads can cause integer underflow during...

8CVSS5.7AI score0.00407EPSS
SaveExploits0References1
Rows per page
Query Builder