Lucene search
+L

12837 matches found

Tenable Nessus
Tenable Nessus
•added 2025/12/02 12:00 a.m.•23 views

Fedora 42 : webkitgtk (2025-4fc934f283)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4fc934f283 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...

9.8CVSS7.1AI score0.04042EPSS
SaveExploits1References17
Microsoft CVE
Microsoft CVE
•added 2025/11/29 9:02 a.m.•9 views

Glib: integer overflow in in g_escape_uri_string()

...

7.7CVSS6.8AI score0.00322EPSS
SaveExploits1
osv_suse
osv_suse
•added 2025/11/28 7:46 a.m.•6 views

SUSE-SU-2025:21128-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used bsc1251198. - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used bsc1251199...

3.6CVSS6.5AI score0.00452EPSS
SaveExploits2References5
osv_suse
osv_suse
•added 2025/11/28 7:46 a.m.•15 views

SUSE-SU-2025:21161-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used bsc1251198. - CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used bsc1251199...

3.6CVSS6.5AI score0.00452EPSS
SaveExploits2References5
SUSE CVE
SUSE CVE
•added 2025/11/28 12:27 a.m.•12 views

SUSE CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References18
VulnCheck KEV
VulnCheck KEV
•added 2025/11/28 12:00 a.m.•14 views

VulnCheck KEV: CVE-2025-5605

An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known...

5.3CVSS6AI score0.0085EPSS
SaveIn wildExploits1References70
SUSE Linux
SUSE Linux
•added 2025/11/26 3:52 p.m.•21 views

Security update for ruby2.5

This update for ruby2.5 fixes the following issues: CVE-2024-35221: Fixed remote DoS via YAML manifest bsc1225905 CVE-2024-47220: Fixed HTTP request smuggling in WEBrick bsc1230930 CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 bsc1232440 CVE-2025-24294: Fixed denial of...

8.3CVSS6.4AI score0.0142EPSS
SaveExploits0References34
osv_suse
osv_suse
•added 2025/11/26 3:52 p.m.•15 views

SUSE-SU-2025:4264-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote DoS via YAML manifest bsc1225905 - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick bsc1230930 - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 bsc1232440 - CVE-2025-24294: Fixed denial...

8.7CVSS6.4AI score0.0142EPSS
SaveExploits0References18
NVD
NVD
•added 2025/11/26 3:15 p.m.•13 views

CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS0.00322EPSS
SaveExploits1References33
osv_ubuntu
osv_ubuntu
•added 2025/11/26 3:15 p.m.•15 views

UBUNTU-CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/26 2:44 p.m.•9 views

CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string()

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References32
attackerkb
attackerkb
•added 2025/11/26 2:44 p.m.•18 views

CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References33
CVE
CVE
•added 2025/11/26 2:44 p.m.•167 views

CVE-2025-13601

CVE-2025-13601 affects GLib’s g_escape_uri_string() where an integer overflow in buffer size calculation can cause a heap-based overflow when escaping strings with many invalid characters. Consequences are described as potential write past the end of the allocated buffer, leading to memory corrup...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References33Affected Software8
osv_cve
osv_cve
•added 2025/11/26 2:44 p.m.•13 views

CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string()

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score
SaveExploits0References38
Debian CVE
Debian CVE
•added 2025/11/26 2:44 p.m.•11 views

CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/11/26 2:44 p.m.•15 views

CVE-2025-13601

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/26 12:00 a.m.•12 views

glib 安全漏洞

glib is a general-purpose, portable utility library from the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, and more. A security vulnerability exists in glib, which stems from a buffer size miscalculation in t...

7.7CVSS7.2AI score0.00322EPSS
SaveExploits1References5
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/24 9:59 p.m.•10 views

Malicious code in image-to-uri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7b50ee7112a1f75ce3c55597ff598a36e98882fce34223c7d5bde782c8a27a The package image-to-uri was found to contain malicious code. Source: ghsa-malware 6d3880cd56fca46045266b2fa25b00db141ca4d96a3e52047e6a414a20f349f5 A...

6.9AI score
SaveExploits0References4
osv_mal
osv_mal
•added 2025/11/24 9:59 p.m.•10 views

MAL-2025-190968 Malicious code in image-to-uri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7b50ee7112a1f75ce3c55597ff598a36e98882fce34223c7d5bde782c8a27a The package image-to-uri was found to contain malicious code. Source: ghsa-malware 6d3880cd56fca46045266b2fa25b00db141ca4d96a3e52047e6a414a20f349f5 A...

6.8AI score
SaveExploits0References4
EUVD
EUVD
•added 2025/11/24 9:59 p.m.•10 views

EUVD-2025-199075

Malicious code in image-to-uri npm...

6.6AI score
SaveExploits0References4
Rows per page
Query Builder