Lucene search
+L

9223 matches found

Snyk
Snyk
added 2025/09/08 2:41 p.m.6 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/08 2:41 p.m.6 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/08 2:41 p.m.4 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/09/08 2:41 p.m.9 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/08 2:15 p.m.18 views

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

8.8CVSS0.02347EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/06 7:15 p.m.16 views

CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

4.7CVSS0.00126EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/09/05 4:10 p.m.1 views

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow. An attacker can access sensitive information by triggering a specially crafted input that causes the process to read beyond the intended memory boundaries. Remediation Upgrade libxml2 to version 2.14.0 or higher...

6.8CVSS6.6AI score0.00079EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/05 12:40 p.m.8 views

OESA-2025-2117 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

5.5CVSS6.5AI score0.00242EPSS
SaveExploits1References3
OSV
OSV
added 2025/09/05 12:40 p.m.7 views

OESA-2025-2116 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

5.5CVSS6.5AI score0.00242EPSS
SaveExploits1References3
OSV
OSV
added 2025/09/05 12:40 p.m.5 views

OESA-2025-2115 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

5.5CVSS6.7AI score0.00142EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/05 12:40 p.m.4 views

OESA-2025-2114 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

5.5CVSS6.7AI score0.00142EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/05 12:40 p.m.5 views

OESA-2025-2113 exiv2 security update

Exiv2 is a Cross-platform C++ library and a command line utility to manage image metadata. It provides fast and easy read and write access to the Exif, IPTC and XMP metadata and the ICC Profile embedded within digital images in various formats. Security Fixes: A vulnerability, which was classifie...

5.5CVSS6.7AI score0.00142EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/05 5:27 a.m.16 views

CVE-2023-21477

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

7.9CVSS6.5AI score0.00143EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/09/05 12:0 a.m.9 views

The vulnerability of the s32ton() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the s32ton function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS7.2AI score0.00161EPSS
SaveExploits0References12Affected Software8
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-10687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In LibSass 3.4.5, there is a heap-based buffer over-read in the function jsonmkstream in sasscontext.cpp. A crafted input will lead to a remote denial of servic...

7.5CVSS7.1AI score0.01758EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-11704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via a...

6.5CVSS6.7AI score0.01204EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-11734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of...

5.5CVSS6.7AI score0.00958EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2017-11729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1440 in util/decompile.c in Ming 0.4.8, which allows attackers...

5.5CVSS6.7AI score0.01083EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-11730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based buffer over-read was found in the function OpCode called from decompileINCRDECR line 1474 in util/decompile.c in Ming 0.4.8, which allows attackers...

5.5CVSS6.7AI score0.01083EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2025/09/04 8:32 a.m.8 views

parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.

...

5.5CVSS7AI score0.00242EPSS
SaveExploits1
Rows per page
Query Builder