Lucene search
K

13 matches found

CNNVD
CNNVD
added 2026/04/23 12:0 a.m.8 views

IBM Guardium Data Protection 安全漏洞

IBM Guardium Data Protection is a comprehensive data security platform developed by the American company International Business Machines IBM. There are security vulnerabilities in versions 12.0, 12.1, and 12.2 of IBM Guardium Data Protection. These vulnerabilities stem from a bypass of business...

4.9CVSS5.8AI score0.003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.8 views

CVE-2026-24407

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in icSigCalcOp. This occurs when user-controllable input is unsafely incorporated into ICC profile data or other structured binary...

8.8CVSS5.8AI score0.00395EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/26 3:10 p.m.12 views

CVE-2026-24411

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior in CIccTagXmlSegmentedCurve::ToXml. This occurs when user-controllable input is unsafely incorporated into ICC profile data or oth...

8.8CVSS5.8AI score0.0031EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2026/01/24 1:9 a.m.5 views

CVE-2026-24409 iccDEV has Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum<>::ParseXml()

iccDEV provides libraries and tools for interacting with, manipulating, and applying ICC color management profiles. Versions 2.3.1.1 and below have Undefined Behavior and Null Pointer Deference in CIccTagXmlFloatNum::ParseXml. This occurs when user-controllable input is unsafely incorporated into...

7.1CVSS5.8AI score0.0031EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-67125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A signed integer overflow in docopt.cpp v0.6.2 LeafPattern::match in docoptprivate.h when merging occurrence counters e.g., default LONGMAX + first user...

4.4CVSS5.9AI score0.0021EPSS
Exploits1References3
OSV
OSV
added 2025/12/01 12:0 a.m.7 views

ASB-A-407763772

Bulletin has no description...

5.7AI score
Exploits0
Packet Storm
Packet Storm
added 2025/03/17 12:0 a.m.341 views

Linux Landlock Disable

A logic bug was discovered in Linux that makes it possible for a process to get rid of all Landlock restrictions applied to it. I found a logic bug that makes it possible for a process to get rid of all Landlock restrictions applied to it: When a process' cred struct is replaced, this almost alwa...

6.8AI score0.00289EPSS
Exploits2
Vulnrichment
Vulnrichment
added 2025/02/12 6:16 p.m.18 views

CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...

8.2CVSS8.3AI score0.03834EPSS
Exploits2References5
Cvelist
Cvelist
added 2024/06/13 9:1 p.m.37 views

CVE-2024-32896

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.0301EPSS
Exploits0References1
CVE
CVE
added 2024/04/05 8:2 p.m.269 views

CVE-2024-29748

CVE-2024-29748 is an Android Pixel privilege-escalation vulnerability affecting Pixel firmware. Root cause described as a logic error allowing local escalation of privilege without extra execution privileges; exploitation requires user interaction. CVSSv3.1 base score 7.8 (HIGH) with LOCAL access...

7.8CVSS8.2AI score0.0068EPSS
In wildExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/20 12:0 a.m.3 views

The vulnerability of the Apache InLong data integration platform, related to the recovery of unreliable data in memory, allows attackers to bypass the application’s logic and gain control over the files’ reading order.

The vulnerability of the Apache InLong data integration platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to bypass the application’s logic and gain control over the files...

7.8CVSS7.2AI score0.01323EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2023/07/01 12:0 a.m.10 views

PUB-A-275462898

there is a possible way to bypass cryptographic assurances due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7AI score0.00062EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/06/29 12:0 a.m.3 views

IBM Cognos Analytics 安全漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics has a...

6.5CVSS5.8AI score0.00951EPSS
Exploits0References4
Rows per page
Query Builder