Lucene search
+L

204 matches found

CVE
CVE
•added 2026/01/27 8:42 a.m.•43 views

CVE-2026-24806

CVE-2026-24806 arises from an improper generation of code in liuyueyi’s quick-media project, specifically the PNGImageEncoder path within the SVG Batik codec fix module. The vulnerability affects quick-media before v1.0 and is described as a Code Injection issue. Supported details from multiple s...

5.3CVSS5.9AI score0.00466EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/22 12:00 a.m.•11 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-38429)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38429 advisory. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only...

10CVSS6.2AI score0.00408EPSS
SaveExploits0References2
OSV
OSV
•added 2026/01/16 11:10 a.m.•12 views

OESA-2026-1110 libpcap security update

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fixes: pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string...

1.9CVSS6.7AI score0.00117EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/13 12:00 a.m.•21 views

Adobe Substance3D Painter 缓冲区错误漏洞

Adobe Substance3D Painter is a 3D scene builder from Audobee Adobe USA. A buffer error vulnerability exists in Adobe Substance3D Painter 11.0.3 and prior versions, which stems from an out-of-bounds write and could lead to the execution of arbitrary code...

7.8CVSS6.1AI score0.00165EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•23 views

CVE-2023-45678

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in startdecoder because at maximum m-submaps can be 16 but submapfloor and submapresidue are declared as arrays of 15 elements. This issue may lead to code execution...

7.8CVSS7.1AI score0.0073EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/31 1:15 a.m.•14 views

AZL-73373 CVE-2025-11961 affecting package libpcap for versions less than 1.10.1-5

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/24 10:29 p.m.•14 views

CVE-2025-14409

Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Soda PDF Desktop. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.9AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/09 4:17 p.m.•12 views

CVE-2025-14308

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This...

9.8CVSS6.2AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/12/09 8:44 a.m.•15 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the write method of the Buffer class. An attacker can execute arbitrary code or cause a buffer overflow by submitting specially crafted inputs that manipulate the data length. Remediation Upgrade...

10CVSS8.1AI score0.00576EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/09 7:44 a.m.•47 views

CVE-2025-14308

CVE-2025-14308 affects Robocode 1.9.3.6, where the write method in the Buffer class fails to validate data length, enabling an integer overflow that can lead to buffer overflow and potentially arbitrary code execution. The vulnerability is described across multiple feeds (NVD, OSV/Ubuntu/Debian m...

10CVSS7.8AI score0.00576EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/09 7:44 a.m.•5 views

CVE-2025-14308 Integer Overflow in Robocode's Buffer Write Method

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This...

10CVSS7.8AI score0.00576EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/09 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2025-40331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sctp: Prevent TOCTOU out-of-bounds write For the following path not holding the sock lock, sctpdiagdump - sctpforeachendpoint - sctpepdump make sure not to exce...

7.8CVSS5.9AI score0.00188EPSS
SaveExploits0References3
AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: The read pointer is updated only after the buffer has been written. Within mhiepringaddelement, the read pointer rdoffset is updated before the buffer is written. This may lead to race conditions, where the host see...

10CVSS6AI score0.00408EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/28 1:45 p.m.•29 views

CVE-2025-53855

An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

7.8CVSS0.00336EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2019-2299

Malware in sbrugna...

7.3CVSS7.4AI score0.00195EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•31 views

EUVD-2018-3307

Malware in sbrugna...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2012-1517

Malware in sbrugna...

9.3CVSS8.6AI score0.05081EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2018-4093

Malware in sbrugna...

7.5CVSS8.6AI score0.08093EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2025/10/06 8:08 a.m.•6 views

CVE-2025-59728 Heap-buffer-overflow write in FFmpeg MDASH resolve_content_path

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

8.7CVSS6.7AI score0.00186EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2025-21795

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00384EPSS
SaveExploits1References4
Rows per page
Query Builder