Lucene search
+L

131 matches found

Cvelist
Cvelist
added 2026/01/08 2:52 p.m.31 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS0.00228EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/12/17 2:31 p.m.10 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues. We have updated the base image used by our Speech Services and the following vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2021-3572...

6.5CVSS7.5AI score0.02421EPSS
SaveExploits7Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/18 6:20 p.m.7 views

CVE-2025-61661

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...

4.8CVSS6.2AI score0.0019EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.7 views

PT-2025-47379

Name of the Vulnerable Software and Affected Versions GRUB affected versions not specified Description A flaw exists in the GRUB bootloader due to improper handling of string conversion when processing information from a USB device. Specifically, the bootloader is susceptible to inconsistent leng...

7.8CVSS6.2AI score0.00394EPSS
SaveExploits0References81
Tenable Nessus
Tenable Nessus
added 2025/10/17 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-62493

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digit...

6.5CVSS6AI score0.00356EPSS
SaveExploits1References3
NVD
NVD
added 2025/10/16 4:15 p.m.7 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS0.00356EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/16 4:15 p.m.4 views

DEBIAN-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.4AI score0.00356EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/16 4:15 p.m.5 views

UBUNTU-CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.8AI score0.00356EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/16 3:51 p.m.1 views

CVE-2025-62493 Heap out-of-bounds read in js_bigint_to_string1 in QuickJS

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

5.9CVSS6AI score0.00356EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/10/16 3:51 p.m.4 views

CVE-2025-62493

A vulnerability exists in the QuickJS engine's BigInt string conversion logic jsbiginttostring1 due to an incorrect calculation of the required number of digits, which in turn leads to reading memory past the allocated BigInt structure. The function determines the number of characters ndigits...

6.5CVSS5.4AI score0.00356EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.8 views

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS, which stems from an error in the computation of the median in the BigInt string conversion logic, which could lead to out-of-bounds reads and information disclosure...

6.5CVSS6.2AI score0.00356EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2018-17152

Malware in sbrugna...

4.3CVSS6.9AI score0.15107EPSS
SaveExploits0References13
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-15655

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.02421EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-7444

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00446EPSS
SaveExploits0References3
OSV
OSV
added 2025/10/01 3:11 p.m.6 views

BIT-GITLAB-2025-10868 Business Logic Errors in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

5.3CVSS7AI score0.00238EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/09/27 9:42 a.m.8 views

CVE-2025-10868

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

5.3CVSS6.9AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/26 10:15 a.m.6 views

CVE-2025-10868

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

5.3CVSS0.00238EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 9:10 a.m.3 views

CVE-2025-10868 Business Logic Errors in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

3.5CVSS6.6AI score0.00238EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/26 9:10 a.m.8 views

CVE-2025-10868 Business Logic Errors in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 where certain string conversion methods exhibit performance degradation with large inputs...

3.5CVSS0.00238EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 9:10 a.m.469 views

CVE-2025-10868

CVE-2025-10868 affects GitLab CE/EE versions 17.4 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1, where certain string conversion methods exhibit performance degradation with very large inputs. Concrete details across connected sources confirm the affected product scope and the perform...

5.3CVSS6.6AI score0.00238EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder