Lucene search
+L

15857 matches found

Mend
Mend
•added 2025/09/26 12:00 a.m.•6 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

5.1CVSS5.6AI score0.00408EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2025/09/26 12:00 a.m.•19 views

CVE-2025-59362

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

4CVSS5.6AI score0.00408EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/25 3:48 p.m.•17 views

CVE-2025-47327

Memory corruption while encoding the image data...

7.8CVSS7.1AI score0.00089EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:54 a.m.•15 views

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

6.5CVSS5.8AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:53 a.m.•15 views

CVE-2025-0209

A reflected cross-site scripting XSS vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of...

6.1CVSS5.9AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/25 12:00 a.m.•36 views

CVE-2025-60249

vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting XSS vulnerability was discovered in the handling of user-supplied input in the Bundles, Comments, and...

6.4CVSS0.00203EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•25 views

PT-2025-39430

Name of the Vulnerable Software and Affected Versions vulnerability-lookup version 2.16.0 Description A cross-site scripting XSS issue exists in the handling of user-supplied input within the Bundles, Comments, and Sightings components of the software. Untrusted data was not properly sanitized...

6.4CVSS5.8AI score0.00203EPSS
SaveExploits0References5
CVE
CVE
•added 2025/09/25 12:00 a.m.•36 views

CVE-2025-60249

CVE-2025-60249 affects vulnerability-lookup 2.16.0 and enables XSS via Bundles, Comments, and Sightings components (bundle.py, comment.py, user.py). The root cause is unsafe handling of user-supplied input, with untrusted data rendered in templates/tables due to innerHTML usage and insufficient v...

6.4CVSS5.7AI score0.00203EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/24 4:15 p.m.•30 views

CVE-2025-47327

Memory corruption while encoding the image data...

7.8CVSS0.00089EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/24 3:33 p.m.•7 views

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/24 3:33 p.m.•33 views

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

7.8CVSS0.00089EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/24 3:33 p.m.•55 views

CVE-2025-47327

CVE-2025-47327 describes a memory-corruption issue during image data encoding affecting Qualcomm chipsets. The vulnerability’s root cause is memory corruption in the image encoding path, with the NVD/CVE records noting a high-severity risk (CVSS v3.1: Local attack, low complexity, no user interac...

7.8CVSS6AI score0.00089EPSS
SaveExploits0References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2025/09/24 2:15 p.m.•16 views

UBUNTU-CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2025/09/24 1:12 p.m.•16 views

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0
CVE
CVE
•added 2025/09/24 1:12 p.m.•61 views

CVE-2025-23274

The CVE-2025-23274 entry concerns NVIDIA nvJPEG in the CUDA Toolkit. The vulnerability is an out-of-bounds read in the jpeg encoding path triggered by a specially crafted input image, where dimensions cause integer overflows in array index calculations. This may lead to a denial of service. Root ...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/24 12:28 a.m.•31 views

CVE-2025-55887

Cross-Site Scripting XSS vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that ...

6.1CVSS6AI score0.00351EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/24 12:00 a.m.•14 views

PT-2025-39253

Name of the Vulnerable Software and Affected Versions NVIDIA nvJPEG affected versions not specified Description The software contains a flaw in JPEG encoding that could allow an attacker to trigger an out-of-bounds read by supplying a specially designed image. The image dimensions are crafted to...

4.5CVSS5.3AI score0.00135EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/09/24 12:00 a.m.•18 views

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption during image data encoding...

7.8CVSS6.1AI score0.00089EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/24 12:00 a.m.•4 views

CVE-2025-23274: Out-of-bounds Read

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

4.5CVSS5.5AI score0.00135EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/24 12:00 a.m.•28 views

PT-2025-39283

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when encoding image data. The issue involves potential corruption during the image encoding process. Recommendations At the moment, there is no information about a...

7.8CVSS6.5AI score0.00089EPSS
SaveExploits0References4
Rows per page
Query Builder