Lucene search
+L

14615 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 2:14 a.m.•23 views

CVE-2012-4357

Array index error in Sielco Sistemi Winlog Pro SCADA before 2.07.17 and Winlog Lite SCADA before 2.07.17 might allow remote attackers to execute arbitrary code by referencing, within a port-46824 TCP packet, an invalid file-pointer index that leads to execution of an EnterCriticalSection code blo...

9.3CVSS8.1AI score0.07351EPSS
SaveExploits2References1
Packet Storm News
Packet Storm News
•added 2025/05/22 12:00 a.m.•15 views

Enhancing Meme Token Market Transparency: a Multi-Dimensional Entity-Linked Address Analysis for Liquidity Risk Evaluation

Meme tokens represent a distinctive asset class within the cryptocurrency ecosystem, characterized by high community engagement, significant market volatility, and heightened vulnerability to market manipulation. This paper introduces an innovative approach to assessing liquidity risk in meme tok...

6.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/21 9:05 p.m.•27 views

CVE-2003-0754

nphpd.php in newsPHP 216 and earlier allows remote attackers to bypass authentication via an HTTP request with a modified nphpusers array, which is used for authentication...

7.5CVSS7.4AI score0.02292EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
•added 2025/05/21 10:09 a.m.•39 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49111: Bluetooth: Fix use after free in hcisendacl bsc1237984. CVE-2025-21726: padata: avoid UAF for reorderwork bsc1238865. CVE-2025-21785: arm64: cacheinfo:...

8.5CVSS8.7AI score0.01944EPSS
SaveExploits5References70
RedHat Linux
RedHat Linux
•added 2025/05/21 6:39 a.m.•20 views

firefox: thunderbird: Out-of-bounds access when optimizing linear sums

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

8.8CVSS7.7AI score0.08672EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/05/20 7:02 p.m.•14 views

firefox: thunderbird: Out-of-bounds access when optimizing linear sums

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

8.8CVSS7.7AI score0.08672EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2025/05/20 4:15 p.m.•7 views

DEBIAN-CVE-2025-37960

In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblockdoublearray When increasing the array size in memblockdoublearray and the slab is not yet available, a call to memblockfindinrange is used to reserve/allocate memory. Howeve...

5.5CVSS5.7AI score0.00189EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/05/20 4:15 p.m.•17 views

UBUNTU-CVE-2025-37960

In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblockdoublearray When increasing the array size in memblockdoublearray and the slab is not yet available, a call to memblockfindinrange is used to reserve/allocate memory. Howeve...

5.5CVSS6.2AI score0.00189EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2025/05/20 1:08 a.m.•13 views

SUSE CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...

8.8CVSS7.9AI score0.08672EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2025/05/20 12:00 a.m.•18 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a missing sentinel entry in the Spectre-BHB MIDR array in arm64...

5.5CVSS6.9AI score0.00204EPSS
SaveExploits0References7
Redos
Redos
•added 2025/05/20 12:00 a.m.•28 views

ROS-20250520-01

Vulnerability of v3dirq function in drivers/gpu/drm/v3d/v3dirq.c - driver for Direct Rendering Infrastructure DRI support in Linux kernel is related to code errors. Direct Rendering Infrastructure DRI of the Linux kernel is related to bugs in the code. Exploitation of the vulnerability could allo...

8.8CVSS8.6AI score0.00684EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2025/05/19 5:47 a.m.•4 views

Malware in safe-array-push

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/05/19 5:47 a.m.•12 views

Malicious code in safe-array-push (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e28af59c0738d11c301ca9b1483179a08a52085b83b24da5b9bc0c551ab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2025/05/19 5:47 a.m.•11 views

MAL-2025-4017 Malicious code in safe-array-push (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e28af59c0738d11c301ca9b1483179a08a52085b83b24da5b9bc0c551ab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•4 views

PT-2025-55138

Уязвимость системы балансировки сетевого трафика Keepalived связана с непроверенным индексированием массива. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

1CVSS5.8AI score
SaveExploits0References6
osv_debian
osv_debian
•added 2025/05/17 10:15 p.m.•7 views

DEBIAN-CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...

8.8CVSS7.9AI score0.08672EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/05/17 10:15 p.m.•14 views

CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...

8.8CVSS7.8AI score0.08672EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2025/05/17 10:15 p.m.•16 views

UBUNTU-CVE-2025-4919

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2...

8.8CVSS7.9AI score0.08672EPSS
SaveExploits0References8
CVE
CVE
•added 2025/05/17 9:07 p.m.•244 views

CVE-2025-4919

Mozilla Firefox and Thunderbird are affected by an out-of-bounds read or write vulnerability in a JavaScript object . The root cause is triggered by confusing array index sizes during operations. This security flaw could potentially lead to memory corruption. Remediation is available in Firefox 1...

8.8CVSS7.9AI score0.08672EPSS
SaveExploits0References8Affected Software2
Mozilla
Mozilla
•added 2025/05/17 12:00 a.m.•39 views

Security Vulnerabilities fixed in Firefox ESR 115.23.1 — Mozilla

An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

9.8CVSS8AI score0.09432EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder