Lucene search
+L

16193 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•5 views

CVE-2025-40198: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.2AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/11 6:15 p.m.•11 views

CVE-2025-60720

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS0.0043EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/11 5:59 p.m.•18 views

EUVD-2025-93411

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•2 views

PT-2025-48908

Уязвимость графического редактора Adobe Illustrator связана с записью за границами буфера. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

7.2CVSS5.8AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/11 12:00 a.m.•4 views

CVE-2025-60720: Buffer Over-read

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/11 12:00 a.m.•16 views

PT-2025-46481

Name of the Vulnerable Software and Affected Versions Windows TDX.sys affected versions not specified Description A buffer over-read issue exists in Windows TDX.sys. A local attacker with authorization can exploit this to gain elevated privileges. Recommendations At the moment, there is no...

7.8CVSS7.3AI score0.0043EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2025/11/05 7:15 p.m.•16 views

DEBIAN-CVE-2025-12745

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

7.8CVSS5.5AI score0.00217EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/05 6:32 p.m.•24 views

EUVD-2025-37919

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

5.3CVSS5.5AI score0.00217EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•7 views

CVE-2025-12745: Buffer Over-read

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public a...

7.8CVSS5.5AI score0.00217EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/05 12:00 a.m.•28 views

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS, which stems from a buffer over-read in the function jsarraybufferslice in the file quickjs.c, which could lead to a local execution attack...

7.8CVSS6.3AI score0.00217EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/11/04 3:19 a.m.•13 views

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

7.8CVSS7.6AI score0.00087EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/04 3:19 a.m.•52 views

CVE-2025-47368 Buffer Over-read in DSP Service

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

7.8CVSS0.00087EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/04 3:19 a.m.•14 views

CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload...

6.1CVSS6.3AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/04 3:19 a.m.•48 views

CVE-2025-47362 Buffer Over-read in Automotive Software platform based on QNX

Information disclosure while processing message from client with invalid payload...

6.1CVSS0.00084EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/04 3:19 a.m.•58 views

CVE-2025-27064

CVE-2025-27064 denotes an information-disclosure vulnerability tied to Qualcomm chipsets/ Core Services, caused by a buffer over-read when registering commands from clients via diagHal. The CVE is listed in multiple sources (NVD/NVD-derived entries, Red Hat, CVE List) with a Common exposure in Qu...

6.1CVSS5.8AI score0.00084EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•9 views

CVE-2025-47368: Buffer Over-read

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...

7.8CVSS7.6AI score0.00087EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•8 views

CVE-2025-47362: Buffer Over-read

Information disclosure while processing message from client with invalid payload...

6.1CVSS6.3AI score0.00084EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•7 views

CVE-2025-27064: Buffer Over-read

Information disclosure while registering commands from clients with diag through diagHal...

6.1CVSS5.8AI score0.00084EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/30 5:09 p.m.•18 views

CVE-2025-62792

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to 4.12.0, a buffer over-read occurs in wexpressionmatch when strlen is called on strtest, because the corresponding buffer is not being properly NULL terminated during its allocation in OSCleanMSG...

7.5CVSS6.8AI score0.00384EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/29 4:50 p.m.•45 views

CVE-2025-62792

CVE-2025-62792 affects Wazuh prior to 4.12.0, where a buffer over-read occurs in w_expression_match() because the buffer allocated in OS_CleanMSG() is not properly NULL terminated. This allows a compromised agent to trigger a read beyond the end of the allocated buffer by sending a crafted messag...

7.5CVSS6.8AI score0.00384EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder