Lucene search
+L

11571 matches found

Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-26191

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.9.1 Description pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to create a malicious PDF that can cause prolonged runtimes and/or significant memory usage...

7.8CVSS5.8AI score0.00349EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.15 views

PT-2026-27719

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's x86/fred component related to speculative safety within the fred extint function. The array index nospec function was not effectively utilized to...

9.8CVSS5.9AI score0.0049EPSS
SaveExploits0References468
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-26145

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTE ARRAY STOP method, an out-by-one error in the cram byte arra...

8.1CVSS6.3AI score0.00336EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.9 views

PT-2026-26147

HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTE ARRAY LEN method, the cram byte array len decode failed to...

8.1CVSS6.3AI score0.00336EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.6 views

PT-2026-26123

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A page array leak existed in the io uring/zcrx functionality of the Linux kernel. A previous fix addressed a page leakage issue but failed to release the associated page array, leading t...

5.5CVSS5.8AI score0.001EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.13 views

PT-2026-8138

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a misalignment issue within the struct virtnet info structure, specifically related to the virtio net component. This issue arises from the misalignment of rss...

9.8CVSS6.3AI score0.00817EPSS
SaveExploits6References293
RedhatCVE
RedhatCVE
added 2025/12/31 5:42 p.m.8 views

CVE-2025-15284

A flaw was found in qs, a module used for parsing query strings. A remote attacker can exploit an improper input validation vulnerability by sending specially crafted HTTP requests that use bracket notation e.g., a=value. This bypasses the arrayLimit option, which is designed to limit the size of...

8.7CVSS5.9AI score0.00417EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/31 1:53 p.m.16 views

CVE-2023-54170

In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assocarray When making a DNS query inside the kernel using dnsquery, the request code can in rare cases end up creating a duplicate index key in the assocarray of the destination...

5.5CVSS5.8AI score0.00179EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/31 7:15 a.m.11 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.00552EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/31 7:15 a.m.5 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS6.2AI score
SaveExploits0References1
OSV
OSV
added 2025/12/31 7:15 a.m.5 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.7AI score
SaveExploits0References1
NVD
NVD
added 2025/12/31 7:15 a.m.8 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS0.00552EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.7 views

CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00552EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/31 7:15 a.m.3 views

UBUNTU-CVE-2025-15270

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.7AI score0.00552EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/31 7:15 a.m.6 views

UBUNTU-CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS6.2AI score0.00552EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/12/31 7:15 a.m.7 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00552EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/31 6:58 a.m.9 views

EUVD-2025-205896

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7AI score0.00552EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/31 6:58 a.m.8 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS7.5AI score0.00552EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 6:58 a.m.3 views

CVE-2025-15271 FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.7AI score0.00552EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/12/31 6:58 a.m.11 views

CVE-2025-15271

FontForge SFD File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit ...

8.8CVSS8.3AI score0.00552EPSS
SaveExploits0
Rows per page
Query Builder