Lucene search
+L

2598 matches found

EUVD
EUVD
added 2026/03/26 3:30 p.m.12 views

EUVD-2019-20037

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

6.8CVSS6.1AI score0.00113EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/26 3:19 p.m.11 views

CVE-2025-43534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

6.8CVSS5.8AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:58 p.m.12 views

CVE-2026-4021

The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5. This is due to the email confirmation handler in users-registry-check-after-email-or-pin-confirmation.php using the user's email strin...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/26 2:16 p.m.13 views

CVE-2019-25649

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

6.8CVSS0.00113EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/26 1:24 p.m.36 views

CVE-2019-25649 River Past Audio Converter 7.7.16 Local Buffer Overflow DoS

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

6.8CVSS0.00113EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/26 1:24 p.m.12 views

CVE-2019-25649 River Past Audio Converter 7.7.16 Local Buffer Overflow DoS

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

6.8CVSS6.1AI score0.00113EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/26 1:24 p.m.15 views

CVE-2019-25649

CVE-2019-25649 affects River Past Audio Converter 7.7.16. A local buffer overflow in the activation code field (E‑Mail and Activation Code) allows a local attacker to crash the application by supplying an oversized input string, triggering a denial of service. The provided documents do not includ...

6.8CVSS6.1AI score0.00113EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/26 12:00 a.m.22 views

River Past Audio Converter 缓冲区错误漏洞

River Past Audio Converter is an audio format conversion and processing tool developed by River Past Corporation. Version 7.7.16 of River Past Audio Converter has a buffer error vulnerability. This vulnerability stems from a local buffer overflow in the activation code field, which may allow loca...

6.8CVSS6.1AI score0.00113EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/26 12:00 a.m.18 views

PT-2026-28260

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

6.8CVSS6.1AI score0.00113EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/25 4:33 p.m.11 views

CVE-2026-27659 CSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpoint

Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to properly validate CSRF tokens in the /api/v4/accesscontrolpolicies/policyid/activate endpoint, which allows an attacker to trick an admin into changing access control policy active status via a craft...

4.6CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/25 4:33 p.m.42 views

CVE-2026-27659 CSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpoint

Mattermost versions 11.2.x = 11.2.2, 10.11.x = 10.11.10, 11.4.x = 11.4.0, 11.3.x = 11.3.1 fail to properly validate CSRF tokens in the /api/v4/accesscontrolpolicies/policyid/activate endpoint, which allows an attacker to trick an admin into changing access control policy active status via a craft...

4.6CVSS0.00123EPSS
SaveExploits0References1
NVD
NVD
added 2026/03/25 1:17 a.m.12 views

CVE-2025-43534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

6.8CVSS0.00208EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/25 12:35 a.m.7 views

CVE-2025-43534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

5.8AI score0.00208EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/03/25 12:35 a.m.35 views

CVE-2025-43534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

0.00208EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/25 12:35 a.m.70 views

CVE-2025-43534

The CVE-2025-43534 issue is a path-handling flaw in iOS/iPadOS that was addressed by validation improvements. It affects iOS 18.7.7 and iPadOS 18.7.7, as well as iOS 26.2 and iPadOS 26.2, where a user with physical access could potentially bypass Activation Lock. The available connected sources c...

6.8CVSS5.8AI score0.00208EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/03/25 12:35 a.m.7 views

CVE-2025-43534

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

5.8AI score0.00208EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/03/25 12:35 a.m.13 views

EUVD-2025-208977

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.2 and iPadOS 26.2. A user with physical access to an iOS device may be able to bypass Activation Lock...

6.8CVSS5.8AI score0.00208EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/03/25 12:00 a.m.20 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Both Apple iOS and Apple iPadOS have security vulnerabilities that stem from path handling issues, which may...

6.8CVSS5.8AI score0.00208EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/03/25 12:00 a.m.14 views

Towards Remote Attestation of Microarchitectural Attacks: The Case of Rowhammer

Microarchitectural vulnerabilities increasingly undermine the assumption that hardware can be treated as a reliable root of trust. Prevention mechanisms often lag behind evolving attack techniques, leaving deployed systems unable to assume continued trustworthiness. We propose a shift from...

5.8AI score
SaveExploits0
EUVD
EUVD
added 2026/03/24 12:30 p.m.15 views

EUVD-2019-19992

River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and...

8.6CVSS6.8AI score0.00242EPSS
SaveExploits1References5
Rows per page
Query Builder