Lucene search
K

6898 matches found

NVD
NVD
added 2025/07/09 12:15 a.m.7 views

CVE-2025-7206

A vulnerability, which was classified as critical, has been found in D-Link DIR-825 2.10. This issue affects the function sub410DDC of the file switchlanguage.cgi of the component httpd. The manipulation of the argument Language leads to stack-based buffer overflow. The attack may be initiated...

10CVSS0.1598EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/07/09 12:0 a.m.3 views

RHEL 10 : libxml2 (RHSA-2025:10630)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10630 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml: Heap use after...

9.1CVSS6.8AI score0.01437EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2025/07/09 12:0 a.m.3 views

RHEL 8 : libxml2 (RHSA-2025:10698)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10698 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml: Heap use after...

9.1CVSS6.8AI score0.01437EPSS
Exploits1References9
Tenable Nessus
Tenable Nessus
added 2025/07/09 12:0 a.m.5 views

AlmaLinux 8 : jq (ALSA-2025:10618)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10618 advisory. jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 jq: AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt...

8.7CVSS6.5AI score0.00446EPSS
Exploits2References4
OSV
OSV
added 2025/07/09 12:0 a.m.3 views

ALSA-2025:10698 Important: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml: Heap use after free UAF leads to Denial of service DoS CVE-2025-49794 libxml: Type confusion leads to Denial of service DoS CVE-2025-49796 libxml2: Integer Overflow in...

9.1CVSS8.4AI score0.01437EPSS
Exploits1References8
RedHat Linux
RedHat Linux
added 2025/07/08 12:34 p.m.5 views

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

8.7CVSS7.3AI score0.00446EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/07/08 12:30 p.m.7 views

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

8.7CVSS7.3AI score0.00446EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2025/07/08 12:30 p.m.4 views

Moderate: Red Hat Security Advisory: jq security update

An update for jq is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

8.7CVSS6.7AI score0.00446EPSS
Exploits2References3
RedHat Linux
RedHat Linux
added 2025/07/08 12:30 p.m.5 views

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

8.7CVSS7.3AI score0.00446EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.1 views

The vulnerability of the formPPPoESetup() function (/goform/formPPPoESetup) in the Wi-Fi range extension software by Belkin F9K1122 allows a intruder to trigger a service failure.

The vulnerability of the formPPPoESetup function /goform/formPPPoESetup of the Belkin F9K1122 Wi-Fi range extender software is due to a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

9CVSS8AI score0.08822EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.3 views

The vulnerability of the HarmonyOS operating system, related to buffer overflows in the stack, allows attackers to compromise the accessibility of protected information.

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

4CVSS5.8AI score0.00086EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.2 views

The vulnerability of the HarmonyOS operating system, related to buffer overflows in the stack, allows a attacker to trigger a service failure.

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

5.3CVSS5.9AI score0.00189EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.4 views

The vulnerability of the HarmonyOS operating system, related to buffer overflows in the stack, allows a attacker to trigger a service failure.

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

4CVSS5.8AI score0.00086EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/08 12:0 a.m.2 views

The vulnerability of the HarmonyOS operating system, related to buffer overflows in the stack, allows a attacker to trigger a service failure.

The vulnerability of the HarmonyOS operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

4CVSS5.8AI score0.00086EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.1 views

Adobe Illustrator 安全漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A stack buffer overflow vulnerability exists in Adobe Illustrator, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00251EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.1 views

PT-2025-28789 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator is susceptible to a Stack-based Buffer Overflow that may lead to arbitrary code execution with current user privileges. Successful...

7.8CVSS7.1AI score0.00251EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/07/08 12:0 a.m.2 views

RHEL 8 : jq (RHSA-2025:10619)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10619 advisory. jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or...

8.7CVSS6.7AI score0.00446EPSS
Exploits2References7
AlmaLinux
AlmaLinux
added 2025/07/08 12:0 a.m.5 views

Moderate: jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fixes: jq: jq has signed integer...

8.7CVSS7.5AI score0.00446EPSS
Exploits2References6
AlmaLinux
AlmaLinux
added 2025/07/08 12:0 a.m.4 views

Moderate: jq security update

jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or transform structured data with the same ease that sed, awk, grep, or similar applications allow you to manipulate text. Security Fixes: jq: jq has signed integer...

8.7CVSS7.5AI score0.00446EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2025/07/08 12:0 a.m.2 views

RHEL 8 : jq (RHSA-2025:10620)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10620 advisory. jq is a lightweight and flexible command-line JSON processor. jq is like sed for JSON data. You can use it to slice, filter, map, or...

8.7CVSS6.7AI score0.00446EPSS
Exploits2References7
Rows per page
Query Builder