Lucene search
K

42 matches found

NVD
NVD
added 2026/04/24 7:17 p.m.1 views

CVE-2026-41415

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID URI in SIP multipart message body. Insufficient length validation can cause reads beyond the intended buffer bounds. This...

9.1CVSS0.00061EPSS
Exploits0References2
CVE
CVE
added 2026/04/24 6:38 p.m.13 views

CVE-2026-41415

PJSIP (the C library) contains CVE-2026-41415: in 2.16 and earlier, parsing a malformed Content-ID URI in a SIP multipart message body can trigger an out-of-bounds read due to insufficient length validation. Red Hat describes a potential denial-of-service impact and notes mitigation may not meet ...

9.1CVSS5.5AI score0.00061EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-1010

Malware in sbrugna...

5CVSS6.4AI score0.00342EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-8995

Malware in sbrugna...

7.5CVSS7.8AI score0.00872EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-31063

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00278EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

EulerOS 2.0 SP10 : libsoup (EulerOS-SA-2025-2075)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages...

7.5CVSS6.2AI score0.00986EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-4948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-10732

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email. The encrypted parts...

4.3CVSS6.7AI score0.00139EPSS
Exploits1References2
RedHat Linux
RedHat Linux
added 2025/06/09 9:56 a.m.3 views

libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/06/04 3:34 a.m.4 views

libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2025/05/26 8:53 a.m.5 views

libsoup: Integer Underflow in soup_multipart_new_from_message() Leading to Denial of Service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7.2AI score0.00986EPSS
Exploits0References5
OSV
OSV
added 2025/05/21 6:16 a.m.0 views

UBUNTU-CVE-2025-4969

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated...

6.5CVSS7.2AI score0.00662EPSS
Exploits0References4
OSV
OSV
added 2025/05/19 4:15 p.m.1 views

AZL-61921 CVE-2025-4948 affecting package libsoup for versions less than 3.0.4-9

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7.1AI score0.00986EPSS
Exploits0References1
NVD
NVD
added 2025/05/19 4:15 p.m.13 views

CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS0.00986EPSS
Exploits0References15
OSV
OSV
added 2025/05/19 4:15 p.m.1 views

AZL-61953 CVE-2025-4948 affecting package libsoup for versions less than 3.4.4-9

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7.1AI score0.00986EPSS
Exploits0References1
OSV
OSV
added 2025/05/19 4:15 p.m.1 views

UBUNTU-CVE-2025-4948

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS7AI score0.00986EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/05/19 3:55 p.m.13 views

CVE-2025-4948 Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup

A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...

7.5CVSS0.00986EPSS
Exploits0References15
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.2 views

libsoup 数字错误漏洞

libsoup is a GNOME HTTP client/server library from the GNOME Project. A numeric error vulnerability exists in libsoup that stems from an integer overflow when processing specially crafted multipart messages, which could cause the program to crash...

7.5CVSS7.7AI score0.00986EPSS
Exploits0References3
OSV
OSV
added 2025/04/15 3:16 p.m.2 views

UBUNTU-CVE-2025-2830

By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory listing of /tmp when the message is forwarded or edited as a new message. This vulnerability could allow attackers to disclose sensitive information from the...

6.3CVSS6.4AI score0.00099EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2024/05/17 2:56 a.m.1 views

SUSE CVE-2024-4140

An excessive memory use issue CWE-770 exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set from 2020 and 2024 limits excessive depth and the total number of parts...

7.5CVSS7.6AI score0.00284EPSS
Exploits0References3
Rows per page
Query Builder