Lucene search
+L

4938 matches found

CNNVD
CNNVD
•added 2025/12/13 12:00 a.m.•22 views

OFFIS DCMTK 缓冲区错误漏洞

OFFIS DCMTK is a collection of libraries and applications that implement most of the DICOM standards from OFFIS Germany. Software for examining, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

6.5CVSS6.5AI score0.00274EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2025/12/11 9:31 p.m.•25 views

pgadmin4 has a Meta-Command Filter Command Execution

The PLAIN restore meta-command filter introduced in pgAdmin as part of the fix for CVE-2025-12762 does not detect meta-commands when a SQL file begins with a UTF-8 Byte Order Mark EF BB BF or other special byte sequences. The implemented filter uses the function hasmetacommands, which scans raw...

9.1CVSS8.3AI score0.00943EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2025/12/11 7:16 a.m.•16 views

AZL-72299 CVE-2025-14512 affecting package glib for versions less than 2.71.0-9

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/11 7:16 a.m.•14 views

UBUNTU-CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References5
NVD
NVD
•added 2025/12/11 7:16 a.m.•19 views

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS0.00579EPSS
SaveExploits0References24
CVE
CVE
•added 2025/12/11 7:11 a.m.•96 views

CVE-2025-14512

CVE-2025-14512 affects GLib2 (glib2) in IBM Netezza Appliance. The IBM security bulletin confirms a vulnerability in GLib’s GIO escape_byte_string() that can cause a heap-based buffer overflow leading to DoS when processing certain file or remote filesystem attribute values. Remediation: upgrade ...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References24Affected Software1
Cvelist
Cvelist
•added 2025/12/11 7:11 a.m.•111 views

CVE-2025-14512 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS0.00579EPSS
SaveExploits0References24
Vulnrichment
Vulnrichment
•added 2025/12/11 7:11 a.m.•8 views

CVE-2025-14512 Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References24
attackerkb
attackerkb
•added 2025/12/11 7:11 a.m.•9 views

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References22
Debian CVE
Debian CVE
•added 2025/12/11 7:11 a.m.•22 views

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/12/11 7:11 a.m.•24 views

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References24
RedhatCVE
RedhatCVE
•added 2025/12/11 7:10 a.m.•15 views

CVE-2025-14512

A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output escapebytestring function when processing malicious file or remote filesystem attribute values. Mitigation Mitigation for this issue is eith...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/11 12:46 a.m.•12 views

SUSE CVE-2025-14104

A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the setpwnam function, affecting SUID Set User ID login-utils utilities writing to the password database...

6.1CVSS7.1AI score0.00193EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2025/12/11 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-14512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output...

6.5CVSS7.1AI score0.00579EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:34 a.m.•11 views

SUSE CVE-2023-53840

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbctrace is called. Reserve an extra byte,...

5.5CVSS6.2AI score0.00244EPSS
SaveExploits0References8
Packet Storm News
Packet Storm News
•added 2025/12/10 12:00 a.m.•17 views

ByteShield: Adversarially Robust End-To-End Malware Detection through Byte Masking

Research has proven that end-to-end malware detectors are vulnerable to adversarial attacks. In response, the research community has proposed defenses based on randomized and derandomized smoothing. However, these techniques remain susceptible to attacks that insert large adversarial payloads. To...

6.8AI score
SaveExploits0
OSV
OSV
•added 2025/12/09 4:17 p.m.•14 views

DEBIAN-CVE-2023-53863

In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not have a six bytes address 1 Replace ETHALEN by dev-addrlen. 1 Case of a device where dev-addrlen = 4 BUG: KMSAN:...

5.9AI score0.00264EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/09 4:17 p.m.•11 views

UBUNTU-CVE-2023-53863

In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in fdb dumps syzbot reports that some netdev devices do not have a six bytes address 1 Replace ETHALEN by dev-addrlen. 1 Case of a device where dev-addrlen = 4 BUG: KMSAN:...

5.9AI score0.00264EPSS
SaveExploits0References12
OSV
OSV
•added 2025/12/09 1:29 a.m.•8 views

CVE-2023-53840 usb: early: xhci-dbc: Fix a potential out-of-bound memory access

In the Linux kernel, the following vulnerability has been resolved: usb: early: xhci-dbc: Fix a potential out-of-bound memory access If xdbcbulkwrite fails, the values in 'buf' can be anything. So the string is not guaranteed to be NULL terminated when xdbctrace is called. Reserve an extra byte,...

6.3AI score
SaveExploits0References7
EUVD
EUVD
•added 2025/12/08 9:30 p.m.•16 views

EUVD-2025-201794

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack...

7.1CVSS6.4AI score0.00302EPSS
SaveExploits0References3
Rows per page
Query Builder