Lucene search
+L

6983 matches found

Tenable Nessus
Tenable Nessus
•added 2025/11/13 12:00 a.m.•10 views

Siemens SIMATIC S7-1500 Out-of-bounds Read (CVE-2019-17595)

There is a heap-based buffer over-read in the fmtentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

5.8CVSS6.7AI score0.02224EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2025/11/12 10:15 p.m.•14 views

DEBIAN-CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.3AI score0.00164EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/11/12 10:15 p.m.•22 views

AZL-70067 CVE-2025-40198 affecting package kernel for versions less than 6.6.117.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.1AI score0.00164EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/12 10:15 p.m.•13 views

CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS0.00164EPSS
SaveExploits0References7
osv_ubuntu
osv_ubuntu
•added 2025/11/12 10:15 p.m.•31 views

UBUNTU-CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.3AI score0.00164EPSS
SaveExploits0References25
CVE
CVE
•added 2025/11/12 9:56 p.m.•69 views

CVE-2025-40198

CVE-2025-40198 affects the Linux kernel's ext4 subsystem. The issue is a potential buffer over-read in parse_apply_sb_mount_options(), triggered by handling of the s_mount_opts string. The fix Hardened parse_apply_sb_mount_options() by treating s_mount_opts as a potential __nonstring and relying ...

7.8CVSS6.1AI score0.00164EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/11/12 9:56 p.m.•25 views

CVE-2025-40198 ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS0.00164EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2025/11/12 9:56 p.m.•15 views

CVE-2025-40198 ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.1AI score0.00164EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2025/11/12 9:56 p.m.•21 views

CVE-2025-40198

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parseapplysbmountoptions Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions by treating smountopts ...

7.8CVSS6.3AI score0.00164EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•19 views

WebXR Components Unauthorized Access

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5CVSS6.1AI score0.00229EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/11/12 12:00 a.m.•20 views

Windows Hyper-V Disclosure

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

5.5CVSS6.5AI score0.00501EPSS
SaveExploits0References2Affected Software16
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•10 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a buffer out-of-bounds read that could lead to a superblock parsing error...

6.6AI score0.00164EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/11/11 6:15 p.m.•10 views

CVE-2025-60720

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/11/11 5:59 p.m.•21 views

CVE-2025-60720

Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...

7.8CVSS7.2AI score0.0043EPSS
SaveExploits0References2Affected Software24
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•16 views

Adobe Format Plugins Buffer Error Vulnerability

Adobe Format Plugins is a format plug-in from the American company Audobee Adobe. Adobe Format Plugins suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to cause the disclosure of sensitive information in memory...

5.5CVSS5.5AI score0.00213EPSS
SaveExploits0References1
Rosalinux
Rosalinux
•added 2025/11/10 6:22 a.m.•21 views

Advisory ROSA-SA-2025-3075

Software: libssh 0.9.6 OS: ROSA Virtualization 2.1 unaffected versions = libssh-0.9.6-15.rv3 affected versions libssh-0.9.6-15.rv3 CVE-ID: CVE-2025-5318 BDU-ID: CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the sftphandle function of the LibSSH library involves reading data outside of buffer...

8.1CVSS6.4AI score0.01841EPSS
SaveExploits0
Rosalinux
Rosalinux
•added 2025/11/10 6:20 a.m.•120 views

Advisory ROSA-SA-2025-3064

Software: libwebp 1.0.0 OS: ROSA Virtualization 2.1 unaffected versions = libwebp-1.0.0.0-10.0.1.rv3 affected versions libwebp-1.0.0.0-10.0.1.rv3 CVE-ID: CVE-2023-4863 BDU-ID: TO600, TO601, TO675, TO797, TO826 CVE-Crit: CRITICAL CVE-DESC.: A vulnerability in the libwebp library for WebP image...

8.8CVSS7.5AI score0.99979EPSS
SaveExploits9
osv_oesa
osv_oesa
•added 2025/11/07 11:09 a.m.•20 views

OESA-2025-2637 python3 security update

Security Fixes: CPython 3.9 and earlier doesn't disallow configuring an empty list "" for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity d...

6.5CVSS6.4AI score0.00744EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/07 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-12745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function jsarraybufferslice of the file quickjs.c. Th...

7.8CVSS5.5AI score0.00217EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2025/11/07 12:00 a.m.•10 views

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library commands relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00142EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder