Lucene search
K

1160 matches found

NVD
NVD
added 2 days ago3 views

CVE-2021-4478

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...

8.3CVSS0.00013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2 days ago2 views

CVE-2021-4478 Dräger CC-Vision Basic and CC-Vision E-Cal Out-of-Bounds Write via Malicious GDT File

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...

8.3CVSS6.3AI score0.00013EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2 days ago4 views

CVE-2021-4478

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...

8.3CVSS6.3AI score0.00013EPSS
Exploits0References2
EUVD
EUVD
added 2 days ago3 views

EUVD-2021-34844

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...

8.3CVSS6.3AI score0.00013EPSS
Exploits0References1
Cvelist
Cvelist
added 2 days ago24 views

CVE-2021-4478 Dräger CC-Vision Basic and CC-Vision E-Cal Out-of-Bounds Write via Malicious GDT File

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...

8.3CVSS0.00013EPSS
Exploits0References2
CVE
CVE
added 2 days ago10 views

CVE-2021-4478

Dräger CC-Vision Basic prior to 7.5.3 and CC-Vision E-Cal prior to 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during parsing, potentially crashing the application or allowing code execution on the host. The avail...

8.3CVSS6.3AI score0.00013EPSS
Exploits0References2
CBLMariner
CBLMariner
added 2 days ago3 views

CVE-2026-39821 affecting package moby-containerd-cc for versions less than 1.7.7-13

CVE-2026-39821 affecting package moby-containerd-cc for versions less than 1.7.7-13. A patched version of the package is available...

9.6CVSS5.8AI score0.0005EPSS
Exploits0
Github Security Blog
Github Security Blog
added 6 days ago18 views

CC-Tweaked has an SSRF Protection Bypass with NAT64

Summary CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed on IPv6-capable servers using NAT64 well-known prefix addresses 64:ff9b::/96. An attacker who can execute Lua code can...

6AI score
Exploits0References2Affected Software8
GitLab Advisory Database
GitLab Advisory Database
added 6 days ago7 views

CC-Tweaked has an SSRF Protection Bypass with NAT64

CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed on IPv6-capable servers using NAT64 well-known prefix addresses 64:ff9b::/96. An attacker who can execute Lua code can reach an...

5.9AI score
Exploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 6 days ago7 views

CC-Tweaked has an SSRF Protection Bypass with NAT64

CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed on IPv6-capable servers using NAT64 well-known prefix addresses 64:ff9b::/96. An attacker who can execute Lua code can reach an...

5.9AI score
Exploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 6 days ago8 views

CC-Tweaked has an SSRF Protection Bypass with NAT64

CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed on IPv6-capable servers using NAT64 well-known prefix addresses 64:ff9b::/96. An attacker who can execute Lua code can reach an...

5.9AI score
Exploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 6 days ago7 views

CC-Tweaked has an SSRF Protection Bypass with NAT64

CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed on IPv6-capable servers using NAT64 well-known prefix addresses 64:ff9b::/96. An attacker who can execute Lua code can reach an...

5.9AI score
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 12:0 a.m.36 views

CVE-2025-70103

Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM function in file lib/extras/dec/pnm.cc...

0.00055EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.4 views

PT-2026-43853

In the Linux kernel, the following vulnerability has been resolved: crypto: ccree - fix a memory leak in cc mac digest Add cc unmap result if cc map hash request final fails to prevent potential memory leak...

5.8AI score0.00032EPSS
Exploits0References6
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.7 views

Astra Linux - уязвимость в libde265

It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the use of mcluma in the motion.cc library. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted video file...

6.5CVSS6.9AI score0.00391EPSS
Exploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в libde265

There is an incorrect access control vulnerability in libde265 v1.0.8 due to a SEGV in slice.cc...

6.5CVSS6.9AI score0.00136EPSS
Exploits1References2
Circl
Circl
added 2026/05/18 10:28 p.m.3 views

CVE-2026-47695

creationtimestamp| type| source ---|---|--- 2026-05-18 22:28:24+00:00| published-proof-of-concept| https://github.com/cc-tweaked/CC-Tweaked/security/advisories/GHSA-5jh9-2h63-pw4q...

5.8AI score
Exploits0References1
CBLMariner
CBLMariner
added 2026/05/18 8:36 p.m.6 views

CVE-2026-35469 affecting package moby-containerd-cc for versions less than 1.7.7-12

CVE-2026-35469 affecting package moby-containerd-cc for versions less than 1.7.7-12. A patched version of the package is available...

8.7CVSS5.8AI score0.00029EPSS
Exploits0
CBLMariner
CBLMariner
added 2026/05/14 11:27 p.m.8 views

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10

CVE-2026-41602 affecting package kata-containers-cc for versions less than 3.15.0.aks0-10. A patched version of the package is available...

7.5CVSS5.8AI score0.00073EPSS
Exploits0
NVD
NVD
added 2026/05/14 9:16 a.m.3 views

CVE-2026-6174

The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'more' parameter in all versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access a...

6.4CVSS0.00032EPSS
Exploits0References2
Rows per page
Query Builder