855 matches found
Character injection in Hubble CLI
Impact A network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output. This could be leveraged to conceal log entries, rewrite output, or even make the terminal temporarily unusable. Exploitatio...
CVE-2025-48056
Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...
CVE-2025-48056 Hubble CLI vulnerable to character injection
Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to version 1.17.2, a network attacker could inject malicious control characters into Hubble CLI terminal output, potentially leading to loss of integrity and manipulation of the output...
PT-2025-22295 · Unknown · Hubble Cli
Name of the Vulnerable Software and Affected Versions: Hubble CLI versions prior to 1.17.2 Description: Hubble is a fully distributed networking and security observability platform for cloud native workloads. A network attacker could inject malicious control characters into Hubble CLI terminal...
The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the verbose parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2024-10635
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...
CVE-2024-10635
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...
CVE-2024-10635 Enterprise Protection S/MIME Opaque Signature Attachment Scanning Bypass
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstrea...
CVE-2025-27442
Cross site scripting in some Zoom Workplace Apps may allow an unauthenticated user to conduct a loss of integrity via adjacent network access...
The vulnerability of the enic_main.c component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the enicmain.c component in the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2025-2442
CVE-2025-2442 concerns Schneider Electric Trio Q Licensed Data Radio. The vulnerability stems from Initialization of a Resource with an Insecure Default , enabling a malicious user with physical access to set the radio to factory default mode and trigger unauthorized access, potentially compromis...
CVE-2025-2223
CWE-20: Improper Input Validation vulnerability exists that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when a malicious project file is loaded by a user from the local system...
The vulnerability of the read_subimage_data function in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the readsubimagedata function in the OpenImageIO image processing library is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...
The vulnerability of the `init_imlib_fonts()` function in the Imlib image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the initimlibfonts function in the Imlib image processing library is related to the failure of the operation outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause servic...
The vulnerability of the ass_outline_construct() function in the ASS/SSA Libass subtitle renderer allows a hacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the dix/devices.c component of the X Window System X.Org Server allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the dix/devices.c component in the X Window System X.Org Server implementation is related to improper resource locking. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Wayland protocol for X.Org XWayland, which is part of the X.Org Server, relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the imlib_load_image_with_error_return function in the Imlib image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the imlibloadimagewitherrorreturn function in the Imlib image processing library is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...
The vulnerability of the RTSP PLAY Command Handler component in the Live555 multimedia streaming library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the RTSP PLAY Command Handler component in the Live555 multimedia streaming library relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...