Lucene search
+L

2283 matches found

CVE
CVE
added 2025/10/16 3:32 p.m.21 views

CVE-2025-11842

The CVE-2025-11842 entry concerns Smidge (up to 4.5.1) with a path traversal vulnerability in the Bundle Handler that abuses the Version argument. This enables remote access to files outside the intended directory. A fix is available: upgrade Smidge Core to version 4.6.0 or higher. Connected sour...

6.5CVSS6.3AI score0.004EPSS
SaveExploits0References5
OSV
OSV
added 2025/10/16 3:32 p.m.7 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

5.3CVSS6.1AI score
SaveExploits0References7
Cvelist
Cvelist
added 2025/10/16 3:32 p.m.14 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS0.004EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/16 3:32 p.m.2 views

CVE-2025-11842 Shazwazza Smidge Bundle path traversal

A security vulnerability has been detected in Shazwazza Smidge up to 4.5.1. The impacted element is an unknown function of the component Bundle Handler. The manipulation of the argument Version leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 4.6.0 is...

6.5CVSS6.4AI score0.004EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/16 12:0 a.m.6 views

Smidge 路径遍历漏洞

Smidge is a file compression, composition, compression, and management library from the individual developer Shannon Deminick. A path traversal vulnerability exists in Smidge 4.5.1 and earlier versions, which stems from the incorrect manipulation of the parameter Version in the Bundle Handler...

6.5CVSS6.2AI score0.004EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/07 8:15 p.m.10 views

CVE-2025-61910

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 7:31 p.m.6 views

EUVD-2025-32887

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 7:31 p.m.2 views

CVE-2025-61910 NASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Service

The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A BPv7 bundle with a malformed extension block causes uncontrolled memory allocation inside ION-DTN 4.1.3s, leading to receiver thread termination and a Denial-of-Service DoS. The...

7.5CVSS6.7AI score0.00331EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-6687

Malware in sbrugna...

5CVSS6.4AI score0.01298EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-13376

Malware in sbrugna...

7.8CVSS7.7AI score0.00336EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2015-3758

Malware in sbrugna...

4.3CVSS8.6AI score0.01683EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2015-3751

Malware in sbrugna...

6.8CVSS5.8AI score0.01491EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-6685

Malware in sbrugna...

5CVSS6.4AI score0.01298EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-1845

Malware in sbrugna...

5.4CVSS4.8AI score0.01401EPSS
SaveExploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2018-11820

Malware in sbrugna...

7.8CVSS7.7AI score0.00416EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2013-6497

Malware in sbrugna...

4CVSS6.4AI score0.00947EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2015-3761

Malware in sbrugna...

4.3CVSS8.7AI score0.01669EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/10/07 12:0 a.m.8 views

PT-2025-41176

Name of the Vulnerable Software and Affected Versions NASA’s Interplanetary Overlay Network ION version 4.1.3 Description A specially crafted BPv7 bundle with a malformed extension block can lead to a Denial-of-Service DoS condition in ION-DTN. The issue stems from uncontrolled memory allocation...

7.5CVSS6.6AI score0.00331EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/10/07 12:0 a.m.3 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986791)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986791 advisory. In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix rxrpcpeer leak in rxrpclookupbundle Need to call rxrpcputpeer for bundle candidate...

5.5CVSS6AI score0.00222EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-29227

Malicious code in bioql PyPI...

8.8CVSS6.3AI score0.00378EPSS
SaveExploits0References5
Rows per page
Query Builder