Lucene search
+L

16202 matches found

Snyk
Snyk
•added 2025/10/16 2:02 p.m.•9 views

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value in the tgtagtype function. An attacker can cause a denial of service by providing crafted input that triggers improper handling of return values. Remediation A fix was pushed into the master branch but not yet...

5.5CVSS5.6AI score0.00276EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/16 2:02 p.m.•3 views

CVE-2025-11839 GNU Binutils prdbg.c tg_tag_type return value

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks...

4.8CVSS5AI score0.00276EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/10/16 12:00 a.m.•2 views

PT-2025-42465

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45 Description A security flaw exists in GNU Binutils 2.45, specifically within the tg tag type function located in the prdbg.c file. Manipulation of this function results in an unchecked return value. Exploitation...

6.2CVSS5.7AI score0.00276EPSS
SaveExploits2References67
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/16 12:00 a.m.•3 views

CVE-2025-11839: Unchecked Return Value

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks...

5.5CVSS5AI score0.00276EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/10/16 12:00 a.m.•16 views

GNU Binutils 安全漏洞

GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily used to work with target files in a variety of formats, and are provided with linkers, assemblers, and other tools for target files and archives....

5.5CVSS5.7AI score0.00276EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/15 9:31 p.m.•14 views

EUVD-2022-55078

In the Linux kernel, the following vulnerability has been resolved: block: Fix the maximum minor value is blkallocextminor idaallocrange..., min, max, ... returns values from min to max, inclusive. So, NREXTDEVT is a valid idx returned by blkallocextminor. This is an issue because in deviceadddis...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/10/15 3:47 p.m.•15 views

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS6.7AI score0.00623EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/15 1:55 p.m.•50 views

CVE-2025-58096 BIG-IP TMM vulnerability

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.2CVSS0.00348EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/15 1:55 p.m.•9 views

CVE-2025-58096 BIG-IP TMM vulnerability

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.2CVSS5.8AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/15 9:30 a.m.•10 views

EUVD-2025-34575

In the Linux kernel, the following vulnerability has been resolved: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow A buffer overflow arises from the usage of snprintf to write into the buffer "buf" in targetlugpmembersshow function located in...

6.6AI score0.00173EPSS
SaveExploits0References7
Microsoft CVE
Microsoft CVE
•added 2025/10/15 8:01 a.m.•19 views

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

...

7.8CVSS6.8AI score0.00197EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/10/15 7:58 a.m.•21 views

CVE-2025-39998 scsi: target: target_core_configfs: Add length check to avoid buffer overflow

In the Linux kernel, the following vulnerability has been resolved: scsi: target: targetcoreconfigfs: Add length check to avoid buffer overflow A buffer overflow arises from the usage of snprintf to write into the buffer "buf" in targetlugpmembersshow function located in...

7.1CVSS0.00173EPSS
SaveExploits0References9
CVE
CVE
•added 2025/10/15 7:58 a.m.•98 views

CVE-2025-39998

CVE-2025-39998 – Linux kernel scsi: target_core_configfs buffer overflow fix. The issue arises in target_lu_gp_members_show in drivers/target/target_core_configfs.c where a snprintf writes into a 256-byte buffer (LU_GROUP_NAME_BUF) and the total length can exceed this, leading to a potential over...

7.1CVSS6.6AI score0.00173EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/15 1:23 a.m.•19 views

EUVD-2017-18920

Valve's Source SDK source-sdk-2013's ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function nexttoken copies characters from an input string into a fixed-size stack buffer without performing bounds checks. When ParseKeyValue processes a collisionpa...

9.2CVSS8AI score0.00693EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•4 views

CVE-2025-61935: Unchecked Return Value

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

8.7CVSS5.8AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/14 6:30 p.m.•18 views

EUVD-2025-34248

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS6.1AI score0.00623EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2025/10/14 5:59 p.m.•32 views

Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.7 for Spring Boot release.

Red Hat build of Apache Camel 4.10.7 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.7CVSS6.8AI score0.00809EPSS
SaveExploits4References6
RedHat Linux
RedHat Linux
•added 2025/10/14 5:59 p.m.•16 views

io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution

In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically substituted with their actual values during processing. This unintended behavior could lead to the exposure of sensitive information, including credentials,...

8.7CVSS6AI score0.00491EPSS
SaveExploits1References6
OSV
OSV
•added 2025/10/14 4:15 p.m.•15 views

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS5.8AI score0.00623EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/14 4:15 p.m.•30 views

CVE-2025-58903

An Unchecked Return Value vulnerability CWE-252 in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request...

4.9CVSS0.00623EPSS
SaveExploits0References2
Rows per page
Query Builder