13577 matches found
DEBIAN-CVE-2025-9809
Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...
CVE-2025-9809
Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...
CVE-2025-9809
Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...
UBUNTU-CVE-2025-9809
Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...
CVE-2025-9809
CVE-2025-9809 affects libretro-common’s cdfs_open_cue_track: an out-of-bounds write allows a crafted .cue file with a PATH_MAX_LENGTH-exceeding path to be copied via memcpy into a fixed-size buffer, enabling arbitrary code execution. Reported across multiple feeds (NVD, Debian/Ubuntu advisories, ...
libretro-common 安全漏洞
libretro-common is a front-end development code block open-sourced by Libretro. A security vulnerability exists in libretro-common that stems from an incorrect manipulation of the path to a .cue file resulting in an out-of-bounds write that could execute arbitrary code...
CVE-2018-15952
creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:35+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2025-9409
A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUpload of the file modules/system/controller/CommonController.go. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack...
Linux Distros Unpatched Vulnerability : CVE-2024-52596
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an untrusted XML document, for example the SAMLResponse, it's possible to...
The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure in the Hitachi Ops Center Common Services lies in its ability to disclose information through registration files, allowing an intruder to gain unauthorized access to protected information.
The vulnerability of the software for managing, monitoring, configuring, and automating IT infrastructure of Hitachi Ops Center Common Services is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access...
Malicious code in gx-ui-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1 The OpenSSF Package Analysis project identified 'gx-ui-common' @ 1.2.66 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41446 Malicious code in gx-ui-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd19f4cdc84c6328351c4c3bda0cd8bde0ae5d9ed6b743d85a70f6a50670c6a1 The OpenSSF Package Analysis project identified 'gx-ui-common' @ 1.2.66 npm as malicious. It is considered malicious because: - The package...
Use of Default Credentials
Overview Affected versions of this package are vulnerable to Use of Default Credentials for the admin account. An attacker can gain full administrative access by using the default credentials if the password is not changed after deployment. Workaround This vulnerability can be mitigated by loggin...
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...
postgresql: PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table
An access control bypass flaw has been discovered in PostgreSQL. The PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide...
Malicious code in itx-zara-web-common (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41576 Malicious code in itx-zara-web-common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in common-logify (npm)
--- -= Per source details. Do not edit below this line.=-...