Lucene search
K

3382 matches found

Cvelist
Cvelist
added 2025/10/22 1:23 p.m.5 views

CVE-2022-50570 platform/chrome: fix memory corruption in ioctl

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: fix memory corruption in ioctl If "smem.bytes" is larger than the buffer size it leads to memory corruption...

0.00044EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:0 a.m.5 views

TencentOS Server 4: xorg-x11-server (TSSA-2025:0760)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0760 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.8CVSS6.5AI score0.00267EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/21 12:31 p.m.3 views

EUVD-2022-54711

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Correct getcontroldata for non bytes payload It is possible to craft a topology where sofgetcontroldata would do out of bounds access because it expects that it is only called when the payload is bytes...

7.1CVSS5.4AI score0.00124EPSS
Exploits0References3
RustSec
RustSec
added 2025/10/21 12:0 p.m.4 views

Uninitialized memory exposure in any_as_u8_slice

The safe function anyasu8slice can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses slice::fromrawparts to create a &u8 covering the entire size of a type, including padding bytes. According to Rust's documentation, fromrawpar...

7.2AI score
Exploits0Affected Software1
OSV
OSV
added 2025/10/21 12:0 p.m.1 views

RUSTSEC-2025-0107 Uninitialized memory exposure in any_as_u8_slice

The safe function anyasu8slice can create byte slices that reference uninitialized memory when used with types containing padding bytes. The function uses slice::fromrawparts to create a &u8 covering the entire size of a type, including padding bytes. According to Rust's documentation, fromrawpar...

7.2AI score
Exploits0References3
OSV
OSV
added 2025/10/19 10:31 p.m.4 views

JLSEC-2025-157 An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3

An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function gbytesnew has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption...

7.5CVSS7.3AI score0.01091EPSS
Exploits1References7
OSV
OSV
added 2025/10/17 5:15 p.m.0 views

UBUNTU-CVE-2025-62171

ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability occurs in coders/bmp.c when calculating...

7.5CVSS5.9AI score0.00076EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/16 6:41 p.m.3 views

EUVD-2025-34776

Strapi Password Hashing Missing Maximum Password Length Validation...

6.3CVSS6.4AI score0.00046EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/10/16 6:43 a.m.8 views

CVE-2025-55090 Potential out of bound read issue in _nx_ipv4_packet_receive() in NetX Duo

In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in nxipv4packetreceive function when received an Ethernet frame with less than 4 bytes of IP packet...

6.9CVSS0.00057EPSS
Exploits0References1
CVE
CVE
added 2025/10/16 6:43 a.m.10 views

CVE-2025-55090

In NetX Duo (Eclipse ThreadX) before version 6.4.4, there is a potential out-of-bounds read in the IPv4 packet path. Specifically, the _nx_ipv4_packet_receive() function can read outside the IP payload when an Ethernet frame is received that contains less than 4 bytes of IP data. This vulnerabili...

6.9CVSS6.4AI score0.00057EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/10/14 3:35 p.m.2 views

JLSEC-2025-50 Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations...

Expat aka libexpat before 2.4.4 has a signed integer overflow in XMLGetBuffer, for configurations with a nonzero XMLCONTEXTBYTES...

9.8CVSS7.2AI score0.01618EPSS
Exploits0References16
AlpineLinux
AlpineLinux
added 2025/10/10 10:4 p.m.2 views

CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

6.9CVSS6.6AI score0.00142EPSS
Exploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7347

Malware in sbrugna...

9.8CVSS9.4AI score0.00459EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-1434

Malware in sbrugna...

5CVSS6.1AI score0.01372EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2000-0824

Malware in sbrugna...

5CVSS6.4AI score0.00886EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-3183

Malware in sbrugna...

10CVSS6AI score0.034EPSS
Exploits0References20
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-3415

Malware in sbrugna...

5CVSS6.3AI score0.0033EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2012-1480

Malware in sbrugna...

4.3CVSS6.4AI score0.00572EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-5125

Malware in sbrugna...

9.8CVSS9.2AI score0.00518EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-1734

Malware in sbrugna...

9.8CVSS8.6AI score0.00166EPSS
Exploits1References5
Rows per page
Query Builder