Lucene search
K

19 matches found

Circl
Circl
added 2026/05/18 4:10 p.m.3 views

GHSA-5R97-79VW-QVM4

creationtimestamp| type| source ---|---|--- 2026-05-18 16:10:50+00:00| seen| https://gist.github.com/alon710/437f2e5c2f0622a4f1f7e66c52bc342f...

5.8AI score
Exploits0References1
OSV
OSV
added 2026/03/22 2:16 p.m.1 views

UBUNTU-CVE-2019-25591

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code...

6.9CVSS6.2AI score0.00006EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/22 1:38 p.m.0 views

CVE-2019-25591 DNSS Domain Name Search Software 2.1.8 Denial of Service

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code...

6.9CVSS6.2AI score0.00006EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:32 a.m.1 views

CVE-2024-39242

A cross-site scripting XSS vulnerability in skycaiji v2.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload using evalString.fromCharCode...

6.1CVSS5.8AI score0.00175EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/06 12:31 a.m.4 views

CVE-2025-32898

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

4.7CVSS6.9AI score0.00046EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/05 12:0 a.m.19 views

CVE-2025-32898

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

4.7CVSS0.00046EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/10/21 12:0 a.m.13 views

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

10CVSS9.3AI score0.06911EPSS
Exploits0References10
OSV
OSV
added 2024/04/24 7:15 p.m.2 views

CVE-2024-4141

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers...

5.5CVSS5.8AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2024/04/24 6:36 p.m.64 views

CVE-2024-4141

CVE-2024-4141: Out-of-bounds array write in Xpdf 4.05 and earlier caused by a bounds-check optimization bug in Type 1 font handling. The Fedora advisories indicate the issue is addressed by updating to xpdf 4.06 (Fedora 42/43 packages), which fixes the vulnerable code path. The CVE description no...

5.5CVSS4.3AI score0.0002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/04/24 6:36 p.m.12 views

CVE-2024-4141 Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers...

2.9CVSS4.4AI score0.0002EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/24 12:0 a.m.0 views

Xpdf 缓冲区错误漏洞

Xpdf is a free PDF viewer and toolkit from Xpdf, Inc. that includes a text extractor, image converter, HTML converter, and more. A security vulnerability exists in Xpdf versions 4.05 and earlier, which stems from a vulnerability that allows an attacker to trigger an out-of-bounds array write...

5.5CVSS6.9AI score0.0002EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.1 views

GPAC Project Advanced Content 安全漏洞

A security vulnerability exists in the MPEG-4 decoding functionality of the GPAC project on Advanced Content library v1.0.1, an open source multimedia framework. The vulnerability stems from the handling of the "hdlr" FOURCC code, where a carefully constructed MPEG-4 input could lead to incorrect...

8.8CVSS6AI score0.00418EPSS
Exploits1References7
Hacker One
Hacker One
added 2017/09/05 5:21 p.m.24 views

Khan Academy: Possible to join any class without coache's knowledge & Little Information Disclosure

Students could join a class using only a 6-character class code. We have increased the codes to 8 characters to make them a bit harder to guess and provide a better balance between security and usability. /...

2.1AI score
Exploits0
NVD
NVD
added 2017/06/20 5:29 p.m.16 views

CVE-2017-3096

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution...

10CVSS9.8AI score0.0261EPSS
Exploits0References3
Prion
Prion
added 2017/06/20 5:29 p.m.15 views

Memory corruption

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution...

10CVSS9.6AI score0.0261EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/06/20 5:29 p.m.0 views

CVE-2017-3096

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution...

9.8CVSS6AI score
Exploits0References3
Cvelist
Cvelist
added 2017/06/20 5:0 p.m.16 views

CVE-2017-3096

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. Successful exploitation could lead to arbitrary code execution...

9.8AI score0.0261EPSS
Exploits0References3
myhack58
myhack58
added 2009/03/04 12:0 a.m.15 views

trim()vulnerability crack and protection+articles the whole story-vulnerability warning-the black bar safety net

With the following code: % dim name,title name=trimrequest. form"name" password=trimrequest. form"password" if name=""or password="" then response. redirect "error. asp? error=name&name=null" myDSN="DSN=test;uid=test;pwd=test" set cn=server. createobject"adodb. connection" cn. open myDSN...

7.2AI score
Exploits0
securityvulns
securityvulns
added 2007/04/24 12:0 a.m.28 views

Lilnksys SPA941 VoIP phone DoS

Denial of Service on character with code 255 in SIP INVITE message...

2.7AI score
Exploits0References1
Rows per page
Query Builder