Lucene search
+L

23802 matches found

EUVD
EUVD
•added 2026/01/08 2:52 p.m.•12 views

EUVD-2026-1160

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS6.3AI score0.00271EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/01/08 2:52 p.m.•4 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS5.8AI score0.00271EPSS
SaveExploits1References3
OSV
OSV
•added 2026/01/08 2:52 p.m.•14 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS6.5AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/01/08 2:52 p.m.•52 views

CVE-2026-22041 loggingredactor converts non-string types to string types in logs

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.1CVSS0.00271EPSS
SaveExploits1References3
CVE
CVE
•added 2026/01/08 2:52 p.m.•38 views

CVE-2026-22041

CVE-2026-22041 affects the Python library Logging Redactor. Prior to version 0.0.6, non-string data are coerced to strings, causing type errors in %d formatting. The issue is fixed in 0.0.6; multiple sources corroborate this patch. No exploit details are provided in the documents. Remediation: up...

5.3CVSS5.8AI score0.00271EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2026/01/08 11:48 a.m.•8 views

BIT-PHP-MIN-2025-14180 NULL Pointer Dereference in PDO quoting

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...

8.2CVSS6.3AI score0.00697EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
•added 2026/01/08 3:15 a.m.•28 views

CVE-2025-61489

A command injection vulnerability in the shellexec function of sonirico mcp-shell v0.3.1 allows attackers to execute arbitrary commands via supplying a crafted command string...

6.5CVSS8.2AI score0.00971EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/01/08 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-13151

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in...

7.5CVSS7.1AI score0.01175EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/01/08 12:00 a.m.•14 views

Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2025-1358)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1358 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

7.5CVSS6.5AI score0.00561EPSS
SaveExploits2References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•3 views

CVE-2026-22041: Incorrect Type Conversion or Cast

Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. Prior to version 0.0.6, non-string types are converted into string types, leading to type errors in %d conversions. The problem has been patched in version 0.0.6. No...

5.3CVSS5.7AI score0.00271EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2026/01/08 12:00 a.m.•5 views

Amazon Linux 2023 : docker (ALAS2023-2025-1340)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1340 advisory. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...

7.5CVSS6.7AI score0.00561EPSS
SaveExploits2References8
OSV
OSV
•added 2026/01/07 10:15 p.m.•13 views

AZL-74070 CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

7.5CVSS7.2AI score0.01175EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/07 10:15 p.m.•33 views

CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

7.5CVSS0.01175EPSS
SaveExploits0References4
OSV
OSV
•added 2026/01/07 10:15 p.m.•18 views

AZL-73664 CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

7.5CVSS7.2AI score0.01175EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/01/07 9:57 p.m.•20 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the asn1expendoctetstring function. An attacker can cause by supplying specially crafted input data that exceeds the expected buffer size. Remediation A fix was pushed into the master branch but not yet...

8.7CVSS6.9AI score0.01175EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/07 9:16 p.m.•24 views

CVE-2026-22190

The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability. The -gp glyph pattern command-line option is used directly as the format string for sprintf with only a single argument supplied. If an attacker provides additional format...

7.5CVSS0.0037EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2026/01/07 9:14 p.m.•12 views

CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

7.5CVSS7.2AI score0.01175EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/01/07 9:14 p.m.•6 views

CVE-2025-13151 CVE-2025-13151

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...

7.2AI score0.01175EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/07 8:47 p.m.•8 views

Use of Externally-Controlled Format String

Overview Panda3D is a Panda3D is a framework for 3D rendering and game development for Python and C++ programs. Affected versions of this package are vulnerable to Use of Externally-Controlled Format String via the egg-mkfont component. An attacker can access sensitive stack-resident memory and...

7.5CVSS6.8AI score0.0037EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/07 8:25 p.m.•51 views

CVE-2026-22190

Summary of CVE-2026-22190 (Panda3D) Affected: Panda3D up to and including 1.10.16, specifically the egg-mkfont utility. Vulnerability: Uncontrolled format string in the -gp (glyph pattern) option. The option is passed directly as the format string to sprintf() with only one argument. If an attack...

7.5CVSS5.6AI score0.0037EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder