Lucene search
+L

643 matches found

Snyk
Snyk
added 2026/04/03 2:39 a.m.3 views

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free in the powerMonitor function. An attacker can cause memory corruption or application crashes by triggering...

8.8CVSS5.8AI score0.00245EPSS
Exploits0References2
NVD
NVD
added 2026/04/01 2:16 a.m.5 views

CVE-2026-3778

The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF. When pages and annotations are crafted that reference each other in a loop, passing the document to APIs e.g., SOAP that perform deep traversal can cause uncontrolled recursion, stack...

6.2CVSS0.00103EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.10 views

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have security vulnerabilities. These vulnerabilities arise from failing to detect or prevent...

6.2CVSS5.8AI score0.00103EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.16 views

LibVNCServer 缓冲区错误漏洞

LibVNCServer is a cross-platform C language library developed by LibVNC, which supports implementing VNC Virtual Network Computing server or client functions within programs. Versions of LibVNCServer prior to 0.9.15 contain a buffer error vulnerability. This vulnerability stems from heap...

8.1CVSS6AI score0.00437EPSS
Exploits1References4
Snyk
Snyk
added 2026/02/24 1:29 a.m.7 views

Integer Overflow or Wraparound

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.6CVSS6AI score0.00319EPSS
Exploits0References2
Veracode
Veracode
added 2026/02/06 7:49 a.m.9 views

Denial-of-Service (DoS)

jsPDF is vulnerable to a Denial-Of-Service DoS. The vulnerability is due to unvalidated image dimensions in the addImage and html methods, where attacker-controlled BMP images with excessively large width or height values trigger excessive memory allocation, leading to out-of-memory errors and...

8.7CVSS5.5AI score0.00559EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.8 views

UltraVNC Launcher 安全漏洞

UltraVNC Launcher is a launcher for the remote control software developed by UltraVNC Corporation. Version 1.2.4.0 of UltraVNC Launcher contains a security vulnerability, which stems from improper handling of the relay host configuration fields, potentially leading to application crashes...

7.5CVSS5.8AI score0.00484EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/05 12:0 a.m.13 views

Nsasoft Nsauditor 安全漏洞

Nsasoft Nsauditor is a network security software developed by the American company Nsasoft. Version Nsasoft Nsauditor 3.2.0.0 contains a security vulnerability. This vulnerability stems from improper handling of the registered name input field, which may lead to application crashes...

7.5CVSS5.8AI score0.00455EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/02/02 12:0 a.m.8 views

libsoup 安全漏洞

Libsoup is a GNOME project’s HTTP client/server library. Libsoup has a security vulnerability that stems from an error in calculating the length of multipart HTTP responses. This error can lead to stack buffer overflows, memory corruption, application crashes, or the execution of arbitrary code...

8.6CVSS6.9AI score0.00947EPSS
Exploits0References4
NCSC
NCSC
added 2026/01/15 12:16 p.m.9 views

Vulnerabilities fixed in Adobe Illustrator

Adobe has fixed vulnerabilities in Adobe Illustrator Specifically for versions 29.8.3, 30.0 and earlier. The vulnerabilities are in the way Adobe Illustrator handles specially crafted files. The first vulnerability involves an Unreliable Search Path issue that can lead to arbitrary code execution...

8.6CVSS8AI score0.00221EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/12 12:0 a.m.11 views

RIOT OS 安全漏洞

RIOT OS is an IoT operating system from RIOT Open Source. A security vulnerability exists in RIOT OS version 2026.01-devel-317 and earlier, which stems from a lack of boundary checking when the ethos tool handles serial frame data, which could lead to memory corruption and application crashes...

9.8CVSS5.8AI score0.00395EPSS
Exploits0References5
NVD
NVD
added 2025/12/11 4:16 p.m.12 views

CVE-2025-55309

An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2. A crafted PDF can contain JavaScript that attaches an OnBlur action on a form field that destroys an annotation. During user right-click interaction, the program's internal focus change...

6.7CVSS0.00117EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.2 views

PT-2025-44834

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memor...

7.1CVSS6.5AI score0.00205EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.6 views

PT-2025-44831

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 Description An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memor...

4.3CVSS6.5AI score0.00915EPSS
Exploits0References9
Veracode
Veracode
added 2025/10/13 6:32 a.m.8 views

Heap-based Buffer Overflow

ImageMagick is vulnerable to a heap-based buffer overflow. The vulnerability is due to improper memory handling in the SeekBlob and WriteBlob functions, which allows an attacker to write data beyond allocated memory, potentially leading to arbitrary code execution or application crashes...

9.8CVSS8.1AI score0.00274EPSS
Exploits1References5Affected Software12
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-16660

Malware in sbrugna...

7.5CVSS7.5AI score0.01762EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2010-1155

Malware in sbrugna...

7.8CVSS6.4AI score0.00956EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2021-30452

Malicious code in bioql PyPI...

9.6CVSS8.6AI score0.03261EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.14 views

EUVD-2023-1744

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.0161EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-38104

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00892EPSS
Exploits1References2
Rows per page
Query Builder