Lucene search
+L

132 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.9 views

CVE-2022-34271

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0...

8.8CVSS6.6AI score0.01384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:51 p.m.9 views

CVE-2020-11253

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS7.3AI score0.00161EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:47 a.m.14 views

CVE-2019-10495

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU,...

7.3CVSS7.7AI score0.00195EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:24 a.m.12 views

CVE-2018-9475

In HeadsetInterface::ClccResponse of btifhf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is...

8.8CVSS7.9AI score0.00148EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/08 12:0 a.m.41 views

CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

2.8CVSS0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2025/05/08 12:0 a.m.91 views

CVE-2025-44021

OpenStack Ironic prior to 29.0.1 is vulnerable to a local-file write during image handling when a deployment is performed via the API. A malicious project assigned as a node owner can supply a path to a local file (readable by ironic-conductor), which may then be written to the target node’s disk...

2.8CVSS3.8AI score0.00155EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/02 4:15 p.m.9 views

CVE-2023-53081

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...

7.8CVSS0.00186EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/05/02 3:55 p.m.15 views

CVE-2023-53081 ocfs2: fix data corruption after failed write

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...

0.00186EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/04/07 12:0 a.m.7 views

PT-2025-28134 · Git +1 · Liblouis

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from an unknown write issue discovered through OSS-Fuzz. The crash state indicates involvement of the lou handlePassVariableAction...

7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/20 9:7 p.m.21 views

CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS0.00151EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/19 9:15 p.m.12 views

CVE-2025-27774

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in modeldownload.py line 156 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the...

9.3CVSS0.00531EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/03/19 8:42 p.m.21 views

CVE-2025-27776 Applio allows SSRF and file write in model_download.py

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in modeldownload.py line 240 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the...

9.3CVSS7.5AI score0.00531EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/19 8:42 p.m.11 views

CVE-2025-27777 Applio allows SSRF and file write in model_download.py

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF in modeldownload.py line 195 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself ...

8.7CVSS6.6AI score0.00394EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/19 8:41 p.m.28 views

CVE-2025-27782 Applio allows arbitrary file write in inference.py

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of...

8.7CVSS0.013EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/03/19 12:0 a.m.5 views

PT-2025-11977 · Applio · Applio

Name of the Vulnerable Software and Affected Versions: Applio versions 3.2.7 and prior Description: Applio is a voice conversion tool vulnerable to server-side request forgery SSRF and file write within the model download.py file line 143 in version 3.2.7. The SSRF allows sending requests on beha...

9.3CVSS7.3AI score0.00535EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2022-0995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory write flaw was found in the Linux kernel's watchqueue event notification subsystem. This flaw can overwrite parts of the kernel stat...

7.8CVSS6.1AI score0.06197EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2017-5049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to...

8.8CVSS7.9AI score0.00858EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2020-29374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a...

3.6CVSS6.3AI score0.00402EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/02/16 12:0 a.m.3 views

PT-2025-11133 · Git +1 · Libvips

Name of the Vulnerable Software and Affected Versions: libvips affected versions not specified Description: The software contains a heap-buffer-overflow write issue occurring within the vips foreign save heif write block function, triggered during wbuffer write thread and vips threadset work...

7AI score
SaveExploits0References2
OSV
OSV
added 2025/01/21 12:18 p.m.7 views

CVE-2024-57942 netfs: Fix ceph copy to cache on write-begin

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix ceph copy to cache on write-begin At the end of netfsunlockreadfolio in which folios are marked appropriately for copying to the cache either with by being marked dirty and having their private data set or by having...

5.5CVSS5.7AI score0.00173EPSS
SaveExploits0References5
Rows per page
Query Builder