Lucene search
+L

443 matches found

OSV
OSV
added 2025/06/18 5:15 p.m.6 views

CVE-2025-20234

A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability...

7.5CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2025/06/18 5:15 p.m.3 views

UBUNTU-CVE-2025-20234

A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability...

7.5CVSS6.9AI score0.00663EPSS
Exploits0References6
CVE
CVE
added 2025/06/18 4:20 p.m.90 views

CVE-2025-20234

CVE-2025-20234 is a memory overread vulnerability in ClamAV’s UDF file processing that can be exploited by an unauthenticated attacker to cause a DoS via crafted UDF content. Affected: ClamAV UDF scanning; root cause: memory overread during UDF file scanning. Impact: DoS on the ClamAV process; no...

7.5CVSS5.4AI score0.00663EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/06/18 4:20 p.m.10 views

CVE-2025-20234 ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit this vulnerability...

5.3CVSS0.00663EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2025/06/18 12:0 a.m.11 views

clamav -- ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Cisco reports: A vulnerability in Universal Disk Format UDF processing of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a memory overread during UDF file scanning. An attacker could exploit thi...

7.5CVSS7.3AI score0.00663EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.6 views

The vulnerability in the JavaScript URI Handler component of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird allows a hacker to escalate their privileges.

The vulnerability of the JavaScript URI Handler component in Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

9.4CVSS7.6AI score0.00376EPSS
Exploits0References19Affected Software8
OSV
OSV
added 2025/06/17 1:15 p.m.4 views

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

7.5CVSS5.8AI score0.9987EPSS
Exploits21References10
NVD
NVD
added 2025/06/17 1:15 p.m.22 views

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

9.3CVSS0.9987EPSS
Exploits18References10
Vulnrichment
Vulnrichment
added 2025/06/17 12:29 p.m.21 views

CVE-2025-5777 NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

9.3CVSS9.4AI score0.9987EPSS
Exploits18References1
EUVD
EUVD
added 2025/06/17 12:29 p.m.11 views

EUVD-2025-18497

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

9.3CVSS7.1AI score0.9987EPSS
Exploits18References1
Cvelist
Cvelist
added 2025/06/17 12:29 p.m.42 views

CVE-2025-5777 NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy OR AAA virtual server...

9.3CVSS0.9987EPSS
Exploits18References1
CVE
CVE
added 2025/06/17 12:29 p.m.369 views

CVE-2025-5777

CVE-2025-6543 is a memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway that can cause unintended control flow and Denial of Service when the appliance is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. The Citrix security bulle...

9.3CVSS9.6AI score0.9987EPSS
In wildExploits18References10Affected Software2
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.5 views

Citrix NetScaler ADC和Citrix NetScaler Gateway 缓冲区错误漏洞

Citrix NetScaler ADC and Citrix NetScaler Gateway are both products of Citrix Corporation, U.S.A. Citrix NetScaler ADC is an application delivery and security platform.Citrix NetScaler Gateway is a secure remote access solution. A buffer error vulnerability exists in Citrix NetScaler ADC and Citr...

9.3CVSS8.5AI score0.9987EPSS
Exploits18References3
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.10 views

The vulnerability of the Siemens User Management Component (UMC) in products such as SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal (TIA Portal) allows a attacker to trigger a service failure.

The vulnerability of the Siemens User Management Component UMC, which is found in products such as SIMATIC PCS neo, SINEC NMS, and Totally Integrated Automation Portal TIA Portal, relates to reading data outside the buffer boundaries in memory. Exploiting this vulnerability could allow a maliciou...

7.8CVSS5.6AI score0.00531EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.7 views

The vulnerability of the JSON extension of the Ruby programming language interpreter allows a hacker to trigger a service failure.

The vulnerability of the JSON extension of the Ruby programming language interpreter involves reading data beyond the allowable range of memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending specially crafted data...

7.8CVSS7.1AI score0.00665EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/04 12:0 a.m.6 views

The vulnerability of the EXPORT_SYMBOL() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the EXPORTSYMBOL function in the Linux operating system’s kernel is related to reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00185EPSS
Exploits0References14Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/06/03 12:0 a.m.7 views

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.7AI score0.00182EPSS
Exploits0References10Affected Software4
RedhatCVE
RedhatCVE
added 2025/05/23 3:14 a.m.6 views

CVE-2023-22297

Access of memory location after end of buffer in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...

8.2CVSS7.2AI score0.00201EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 12:53 p.m.13 views

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

5.5CVSS6.9AI score0.00204EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.8 views

The vulnerability of the Zabbix Agent component of the Zabbix IT infrastructure monitoring system allows a attacker to cause a service failure.

The vulnerability of the Zabbix Agent component in the IT infrastructure monitoring system relates to reading memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS5.7AI score
Exploits0Affected Software1
Rows per page
Query Builder