Lucene search
+L

6704 matches found

Patchstack
Patchstack
•added 2025/12/31 12:58 p.m.•24 views

WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AdWords Conversion Tracking Code versions = 1.0...

6.5CVSS6AI score0.00154EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/12/31 3:30 a.m.•12 views

EUVD-2025-205868

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/31 12:58 a.m.•7 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 12:58 a.m.•54 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS0.00122EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/31 12:58 a.m.•23 views

CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•13 views

WordPress plugin AdWords Conversion Tracking Code 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scripting vulnerability exis...

6.5CVSS6AI score0.00154EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•18 views

PT-2025-54319

Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0 Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•9 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993235 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: fix memory leak inside XPDTX with mergeable When we call xdpconvertbufftoframe to get...

5.5CVSS5.8AI score0.00189EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•18 views

libpcap 安全漏洞

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A security vulnerability exists in libpcap, which stems from a flaw in the handling of specific characters by the utf16letoutf8truncated function, which could lead to out-of-bounds writes...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•17 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993120 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...

7.1CVSS6.1AI score0.00216EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•9 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992836 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...

7.5CVSS6.2AI score0.00623EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•7 views

CVE-2025-11964: Out-of-bounds Write

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/31 12:00 a.m.•6 views

CVE-2025-62118: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...

6.5CVSS5.8AI score0.00154EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/30 4:56 p.m.•2 views

CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

5.3CVSS6.2AI score0.00601EPSS
SaveExploits1References2
OSV
OSV
•added 2025/12/30 4:56 p.m.•9 views

CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

5.3CVSS7.3AI score
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•21 views

The vulnerability of the CmpVisuServer component in the CODESYS industrial automation software suite allows a malicious individual to trigger a service failure.

The vulnerability of the CmpVisuServer component in the CODESYS industrial automation software suite is related to data type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.8AI score0.00389EPSS
SaveExploits0References4Affected Software17
Tenable Nessus
Tenable Nessus
•added 2025/12/30 12:00 a.m.•14 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992661)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992661 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...

7.1CVSS6.1AI score0.00216EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/12/25 12:10 p.m.•15 views

CVE-2022-50699

In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...

5.5CVSS5.9AI score0.002EPSS
SaveExploits0References4
OSS-Fuzz
OSS-Fuzz
•added 2025/12/25 2:51 a.m.•26 views

openbabel:fuzz_obconversion_sdf: Bad-cast to OBRingData from OpenBabel::OBPairData in OpenBabel::OBMol::GetSSSR

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4904772219240448 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzobconversionsdf Job Type: libfuzzerubsanopenbabel Platform Id: linux Crash Type: Bad-cast Crash Address:...

5.4AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2025/12/25 2:31 a.m.•10 views

openbabel:fuzz_obconversion_sdf: Heap-buffer-overflow in OpenBabel::MDLFormat::ReadV3000Block

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4554638784528384 Project: openbabel Fuzzing Engine: honggfuzz Fuzz Target: fuzzobconversionsdf Job Type: honggfuzzasanopenbabel Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

5.4AI score
SaveExploits0
Rows per page
Query Builder