Lucene search
+L

25094 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•14 views

CVE-2025-23384: Partial String Comparison

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2.1, SCALANCE M812-1 ADSL-Router family All versions V8.2.1, SCALANCE M816...

6.3CVSS5.4AI score0.00278EPSS
SaveExploits0References2
osv_suse
osv_suse
•added 2025/03/10 3:03 p.m.•14 views

SUSE-SU-2025:0821-1 Security update for iniparser

This update for iniparser fixes the following issues: - CVE-2025-0633: string copy into buffer without previous size validation leads to heap buffer overflow in iniparserdumpsectionini of iniparser bsc1237377...

5.1CVSS7.2AI score0.00229EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2025/03/10 8:13 a.m.•24 views

BIT-DJANGO-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

7.5CVSS7AI score0.0083EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/03/07 2:38 a.m.•11 views

SUSE CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136...

9.8CVSS6.9AI score0.00479EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/03/06 12:00 a.m.•19 views

Samsung Notes security vulnerabilities

Samsung Notes is an application program from the South Korean company Samsung SAMSUNG. It is used to provide a recording function. An out-of-bounds read vulnerability exists in Samsung Notes, which originates from an out-of-bounds read in the SPen string read, and can be exploited by an attacker ...

7.5CVSS6.7AI score0.00283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•24 views

Linux Distros Unpatched Vulnerability : CVE-2024-49995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun Smatch reports that copying medianame and ifname t...

7.3AI score
SaveExploits0References1
Amazon
Amazon
•added 2025/03/06 12:00 a.m.•18 views

Important: kernel-livepatch-4.14.355-275.582

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: tipc: guard against string buffer overrun CVE-2024-49995 In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing CVE-2024-50279...

7.1CVSS6.9AI score0.00262EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/03/06 12:00 a.m.•28 views

CVE-2025-26699

An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings...

5CVSS7AI score
SaveExploits0References7
osv_clsa
osv_clsa
•added 2025/03/05 10:59 p.m.•17 views

CLSA-2025-1741215546 cups: Fix of CVE-2024-47175

CVE-2024-47175: fixed multiple PPD vulnerabilities by validating inputs, sanitizing strings, quoting localized data, and addressing warnings in cups/ppd-cache.c and scheduler/ipp.c...

9.8CVSS7.3AI score0.63607EPSS
SaveExploits7References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2021-3712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffe...

7.4CVSS6.6AI score0.50445EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2024-36010

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: igb: Fix string truncation warnings in igbsetfwversion Commit 1978d3ead82c intel: fix string...

5.5CVSS5.4AI score0.00178EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2023-52464

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of- bounds string access Enabling -Wstringop-overflow...

7.8CVSS5.4AI score0.00266EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2022-1215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A format string vulnerability was found in libinput CVE-2022-1215 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVE...

7.8CVSS7.1AI score0.0038EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2022-24805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of...

8.8CVSS7.2AI score0.01299EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2022-49124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mce: Work around an erratum on fast string copy instructions A rare kernel panic scenario can happen when the following conditions are met due to an erratum...

5.5CVSS6.1AI score0.00249EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/03/04 2:39 p.m.•21 views

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

5.3CVSS5.7AI score0.17565EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
•added 2025/03/04 2:20 p.m.•35 views

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

5.3CVSS5.7AI score0.17565EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/03/04 2:15 p.m.•17 views

CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox 136 and Thunderbird 136...

9.8CVSS6.9AI score0.00479EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2025/03/04 2:15 p.m.•15 views

UBUNTU-CVE-2025-1942

When String.toUpperCase caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox 136 and Thunderbird 136...

9.8CVSS6.7AI score0.00479EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2012-5580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Format string vulnerability in the printproxies function in bin/proxy.c in libproxy 0.3.1 might allow context-dependent attackers to cause a denial of service...

7.5CVSS6.4AI score0.03125EPSS
SaveExploits1References2
Rows per page
Query Builder