Lucene search
+L

16247 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•9 views

CVE-2024-38404: Buffer Over-read

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

7.5CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•6 views

CVE-2024-49839: Buffer Over-read

Memory corruption during management frame processing due to mismatch in T2LM info element...

9.8CVSS6AI score0.00295EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•4 views

CVE-2024-49838: Buffer Over-read

Information disclosure while parsing the OCI IE with invalid length...

8.2CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•7 views

CVE-2024-38416: Buffer Over-read

Information disclosure during audio playback...

6.1CVSS5.8AI score0.00101EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/30 12:00 a.m.•1 views

PT-2025-55144

Уязвимость функции nts client process response компонента ntpd/nts client.c реализации протокола сетевого времени NTPsec связана с чтением за допустимыми границами буфера данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

5CVSS5.8AI score
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/28 10:08 p.m.•33 views

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2024-5535]

Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-5535 Vulnerability Details CVEID:CVE-2024-5535 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a buffer over-read flaw in the...

9.1CVSS6.9AI score0.05582EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/28 10:08 p.m.•30 views

Security Bulletin: A vulnerability in nginx affects IBM Robotic Process Automatin for Cloud Pak and may result in a denial of service (CVE-2024-7347)

Summary A vulnerability in nginx affects IBM Robotic Process Automatin for Cloud Pak and may result in a denial of service. nginx is used by IBM Robotic Process Automation as part of it's container deployment. This bulletin identifies the security fix to apply to address the vulnerability...

5.7CVSS7.2AI score0.0032EPSS
SaveExploits1Affected Software1
osv_bit
osv_bit
•added 2025/01/27 7:20 a.m.•37 views

BIT-RUBY-MIN-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including KernelFloat and Stringtof...

7.5CVSS7AI score0.0437EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2025/01/26 12:00 a.m.•22 views

openSUSE 15 Security Update : qt6-connectivity (openSUSE-SU-2025:0033-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0033-1 advisory. - CVE-2025-23050: Fixed buffer over-read and division by zero boo1236237 Tenable has extracted the preceding description block directly from the SUSE...

3.1CVSS5.7AI score0.00189EPSS
SaveExploits0References4
osv_opensuse
osv_opensuse
•added 2025/01/25 5:01 p.m.•13 views

OPENSUSE-SU-2025:0033-1 Security update for qt6-connectivity

This update for qt6-connectivity fixes the following issues: - CVE-2025-23050: Fixed buffer over-read and division by zero boo1236237...

3.1CVSS6.8AI score0.00189EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
•added 2025/01/25 12:00 a.m.•28 views

Security update for qt6-connectivity (moderate)

openSUSE Security Update: Security update for qt6-connectivity Announcement ID: openSUSE-SU-2025:0033-1 Rating: moderate References: 1236237 Cross-References: CVE-2025-23050 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...

3.1CVSS7.4AI score0.00189EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/01/24 7:13 p.m.•27 views

Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Snappy, OpenSSL and cURL libcurl. An attacker, a local attacker or a remote attacker could exploit these vulnerabilities to cause JVM to crash, to cause a crash or memory contents to be sent to the peer, to bypass...

9.1CVSS7.6AI score0.36081EPSS
SaveExploits5Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/22 12:00 a.m.•23 views

PT-2025-14571

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw was found in libsoup, making the package vulnerable to a heap buffer over-read when sniffing content via the skip insight whitespace function. Libsoup clients may read one byte...

7.8CVSS6.8AI score0.00972EPSS
SaveExploits1References174
osv_bit
osv_bit
•added 2025/01/14 7:24 p.m.•47 views

BIT-PHP-MIN-2020-7060 global buffer-overflow in mbfl_filt_conv_big5_wchar

When using certain mbstring functions to convert multibyte encodings, in PHP versions 7.2.x below 7.2.27, 7.3.x below 7.3.14 and 7.4.x below 7.4.2 it is possible to supply data that will cause function mbflfiltconvbig5wchar to read past the allocated buffer. This may lead to information disclosur...

9.1CVSS8.2AI score0.08888EPSS
SaveExploits1References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•4 views

CVE-2025-21176: Buffer Over-read

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability...

8.8CVSS5.8AI score0.02347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•19 views

PT-2025-36469

Name of the Vulnerable Software and Affected Versions: .NET 6.0.0 through 6.0.36 .NET 8.0.0 through 8.0.11 .NET 9.0.0 Description: A buffer over-read issue exists in DiaSymReader.dll. This occurs when a product reads from a buffer using buffer access mechanisms that reference memory locations aft...

10CVSS9.1AI score0.00771EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•7 views

CVE-2025-21277: Buffer Over-read

Microsoft Message Queuing MSMQ Denial of Service Vulnerability...

7.5CVSS5.7AI score0.38612EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•4 views

CVE-2025-21271: Buffer Over-read

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.0054EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/01/10 5:38 p.m.•16 views

CVE-2024-57822

A flaw was found in the Raptor RDF syntax library librdf. A heap-based buffer over-read condition may be triggered when parsing specially crafted RDF triples via the nquads parser. This issue can lead to an application crash or other undefined behavior...

4CVSS6.9AI score0.00292EPSS
SaveExploits1References6
NVD
NVD
•added 2025/01/10 1:15 p.m.•21 views

CVE-2024-57822

In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptorntriplesparseterminternal...

5.5CVSS0.00292EPSS
SaveExploits1References4
Rows per page
Query Builder