Lucene search
K

163 matches found

OSV
OSV
added 2026/01/08 11:48 a.m.5 views

BIT-PHP-2025-14180 NULL Pointer Dereference in PDO quoting

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...

8.2CVSS6.8AI score0.00047EPSS
Exploits2References2
AlpineLinux
AlpineLinux
added 2025/12/27 7:21 p.m.2 views

CVE-2025-14180

In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, 8.5. before 8.5.1 when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting function...

8.2CVSS6.5AI score0.00047EPSS
Exploits2
OSV
OSV
added 2025/12/27 9:4 a.m.8 views

RLSA-2023:2903 Moderate: php:7.4 security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The following packages have been upgraded to a later upstream version: php 7.4.33. Security Fixes: XKCP: buffer overflow in the SHA-3 reference implementation CVE-2022-37454 php: standard insecure cookie could b...

8.1CVSS9.4AI score0.15416EPSS
Exploits7References7
Mageia
Mageia
added 2025/12/21 4:11 a.m.6 views

Updated php packages fix security vulnerabilities

Opcache: - Reset global pointers to prevent use-after-free in zendjitstatus. PDO: - Fixed PDO quoting result null deref. Standard: - Fixed Null byte termination in dnsgetrecord - Heap buffer overflow in arraymerge - Information Leak of Memory in getimagesize...

8.2CVSS7.5AI score0.00047EPSS
Exploits4References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-1540

Malware in sbrugna...

7.6CVSS8AI score0.061EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-40771

Malicious code in bioql PyPI...

8.8CVSS6.2AI score0.08063EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2022-31626

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdomysql extension with mysqlnd driver, if the third party is allowed to...

8.8CVSS9.1AI score0.1024EPSS
Exploits2References2
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-46980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d usb:...

7.1CVSS5.9AI score0.00039EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 3:16 a.m.2 views

CVE-2023-22728

Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.15, the GridField print view incorrectly validates the permission of DataObjects potentially allowing a content author to view records they are not authorise...

4.3CVSS6.8AI score0.00054EPSS
Exploits0References1
OSV
OSV
added 2024/10/08 6:15 p.m.0 views

CVE-2024-43517

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.08063EPSS
Exploits0References1
NVD
NVD
added 2024/10/08 6:15 p.m.18 views

CVE-2024-43517

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...

8.8CVSS0.08063EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/08 5:35 p.m.19 views

CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

...

8.8CVSS0.08063EPSS
Exploits0References1
CVE
CVE
added 2024/10/08 5:35 p.m.88 views

CVE-2024-43517

CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...

8.8CVSS9.1AI score0.08063EPSS
Exploits0References1Affected Software15
Vulnrichment
Vulnrichment
added 2024/10/08 5:35 p.m.16 views

CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

...

8.8CVSS8.7AI score0.08063EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2024/10/08 7:0 a.m.48 views

Microsoft ActiveX Data Objects Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.08063EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.1 views

PT-2024-6762 · Microsoft · Activex Data Objects +1

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveX Data Objects affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system and...

10CVSS8.2AI score0.08063EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2024/02/29 9:2 a.m.18 views

CVE-2021-46980

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d "usb: typec: ucsi: save power data objects in PD mode" introduced retrieval of the PDOs when connected to a PD-capable source. But only the...

6CVSS6.3AI score0.00039EPSS
Exploits0References4
OSV
OSV
added 2024/02/28 9:15 a.m.2 views

DEBIAN-CVE-2021-46980

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d "usb: typec: ucsi: save power data objects in PD mode" introduced retrieval of the PDOs when connected to a PD-capable source. But only the...

7.1CVSS6.2AI score0.00039EPSS
Exploits0References1
OSV
OSV
added 2024/02/28 9:15 a.m.4 views

CVE-2021-46980

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d "usb: typec: ucsi: save power data objects in PD mode" introduced retrieval of the PDOs when connected to a PD-capable source. But only the...

7.1CVSS7.1AI score
Exploits0References4
OSV
OSV
added 2024/02/28 9:15 a.m.0 views

UBUNTU-CVE-2021-46980

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Retrieve all the PDOs instead of just the first 4 commit 4dbc6a4ef06d "usb: typec: ucsi: save power data objects in PD mode" introduced retrieval of the PDOs when connected to a PD-capable source. But only the...

7.1CVSS6.6AI score0.00039EPSS
Exploits0References7
Rows per page
Query Builder