Lucene search
+L

282 matches found

OSV
OSV
added 2025/09/01 7:15 p.m.11 views

UBUNTU-CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

9.8CVSS6.2AI score0.00424EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/09/01 6:38 p.m.4 views

CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

8.4CVSS7.4AI score0.00424EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/01 6:38 p.m.20 views

CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

8.4CVSS0.00424EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/09/01 6:38 p.m.11 views

CVE-2025-9809

Out-of-bounds write in cdfsopencuetrack in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATHMAXLENGTH that is copied using memcpy into a fixed-size buffer...

9.8CVSS6.1AI score0.00424EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/09/01 12:00 a.m.10 views

libretro-common 安全漏洞

libretro-common is a front-end development code block open-sourced by Libretro. A security vulnerability exists in libretro-common that stems from an incorrect manipulation of the path to a .cue file resulting in an out-of-bounds write that could execute arbitrary code...

9.8CVSS7.2AI score0.00424EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/01 12:00 a.m.6 views

PT-2025-35505

Name of the Vulnerable Software and Affected Versions libretro libretro-common affected versions not specified Description An out-of-bounds write issue exists in the cdfs open cue track function. This allows remote attackers to execute arbitrary code via a crafted .cue file. The issue occurs when...

9.8CVSS6.2AI score0.00424EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-43641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcue provides an API for parsing and extracting data from CUE sheets. Versions 2.2.1 and prior are vulnerable to out-of-bounds array access. A user of the GNO...

8.8CVSS8.2AI score0.1657EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-23985

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could hav...

6.5CVSS6.8AI score0.01397EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.4 views

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer is a library for constructing graphs of media-handling components. A OOB-read vulnerability has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability occurs due to a discrepancy between the size of the data buffer and the size value provided to the function. Thi...

9.1CVSS6.7AI score0.01171EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/03 4:37 p.m.18 views

CVE-2025-31787

Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through = 2.4.4...

4.3CVSS7.2AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/01 3:16 p.m.14 views

CVE-2025-31787

Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through = 2.4.4...

4.3CVSS0.00396EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/01 2:51 p.m.28 views

CVE-2025-31787 WordPress Cue by AudioTheme.com plugin <= 2.4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in AudioTheme Cue cue allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cue: from n/a through = 2.4.4...

4.3CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/01 2:51 p.m.10 views

CVE-2025-31787 WordPress Cue by AudioTheme.com plugin <= 2.4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brady Vercher Cue allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Cue: from n/a through 2.4.4...

4.3CVSS7.1AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/01 2:51 p.m.54 views

CVE-2025-31787

Technical details about CVE-2025-31787 are not provided in the connected documents; only the description notes a missing authorization issue in Cue (WordPress Cue plugin) up to version 2.4.4. Monitor for official advisories for specifics.

4.3CVSS7.2AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/01 12:00 a.m.26 views

WordPress plugin Cue 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6.1AI score0.00396EPSS
SaveExploits0References2
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.113 views

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infra-operator, kor, vertical-pod-autoscaler, k8sgpt-operator, nri-apache, kpt, helm, amass, kustomize, docker-credential-acr-env, govulncheck, kube-state-metrics, go-bindata, vite, kubebuilder, tailscale, regclient, buildkitd, kubernetes-dns-node-cache...

5.2AI score
SaveExploits0
Wolfi
Wolfi
added 2025/02/25 3:16 p.m.68 views

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: k3d, newrelic-infra-operator, kor, vertical-pod-autoscaler, k8sgpt-operator, nri-apache, kpt, helm, amass, kustomize, docker-credential-acr-env, govulncheck, kube-state-metrics, go-bindata, vite, kubebuilder, tailscale, regclient, buildkitd, kubernetes-dns-node-cache...

5.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:00 a.m.11 views

The vulnerability of the gst_wavparse_cue_chunk function in the Gstreamer multimedia framework, which allows a hacker to access confidential information

The vulnerability of the gstwavparsecuechunk function in the Gstreamer multimedia framework relates to reading data outside of the allowed range by the WAV parser. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

9.4CVSS6.7AI score0.01171EPSS
SaveExploits0References13Affected Software13
SUSE CVE
SUSE CVE
added 2024/12/13 12:29 a.m.6 views

SUSE CVE-2024-47776

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

5.5CVSS7.1AI score0.01171EPSS
SaveExploits0References10
OSV
OSV
added 2024/12/12 2:03 a.m.10 views

AZL-62372 CVE-2024-47776 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in gstwavparsecuechunk within gstwavparse.c. The vulnerability happens due to a discrepancy between the size of the data buffer and the size value provided to the function. This mismatch...

9.1CVSS5.8AI score0.01171EPSS
SaveExploits0References1
Rows per page
Query Builder