Lucene search
K

100 matches found

Positive Technologies
Positive Technologies
added 2025/06/28 12:0 a.m.3 views

PT-2025-27312 · Volkswagen · Mib3

Name of the Vulnerable Software and Affected Versions: MIB3 infotainment affected versions not specified Description: A specific flaw exists within the Bluetooth stack of the MIB3 infotainment, resulting from the lack of proper validation of user-supplied data. This can cause an integer overflow...

5.4CVSS7AI score0.0031EPSS
Exploits0References8
CVE
CVE
added 2025/06/17 2:29 p.m.38 views

CVE-2025-6196

CVE-2025-6196 affects libgepub, a library used to read EPUB files. The underlying issue is an integer/size calculation problem in the EPUB archive handling, which can lead to oversized memory allocations and crash the application. Documented impact includes potential denial of service when parsin...

5.5CVSS5.3AI score0.00191EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 10:1 p.m.3 views

CVE-2022-26711

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...

9.8CVSS7.1AI score0.035EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:38 p.m.3 views

CVE-2021-30275

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

9.3CVSS7.9AI score0.00154EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:56 p.m.7 views

CVE-2020-11305

Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music...

6.8CVSS7.5AI score0.00212EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:26 p.m.6 views

CVE-2020-27945

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. Processing maliciously crafted web content may lead to arbitrary code execution...

7.8CVSS7.2AI score0.00728EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 7:1 a.m.6 views

CVE-2018-18749

data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the writewchars function...

5.5CVSS7AI score0.00726EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.6 views

Alibaba Cloud Linux 3 : 0107: iperf3 (ALINUX3-SA-2023:0107)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0107 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-38403: iperf3 before 3.14 allows peers to...

7.5CVSS7.5AI score0.01703EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/04/29 12:0 a.m.11 views

Amazon Linux 2 : runc (ALASNITRO-ENCLAVES-2025-055)

The version of runc installed on the remote host is prior to 1.1.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2025-055 advisory. Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go...

7.8CVSS7.3AI score0.05335EPSS
Exploits6References32
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.4 views

PT-2025-15335 · Nothings +1 · Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical issue was found in Nothings stb, affecting the stb dupreplace function. The manipulation leads to integer overflow, and the attack may be launched remotely. The product uses continuous delive...

7.5CVSS6.2AI score0.0041EPSS
Exploits0References18
CVE
CVE
added 2025/03/20 9:7 p.m.46 views

CVE-2025-2574

CVE-2025-2574 is an out-of-bounds write in Xpdf’s PostScript interpreter due to incorrect integer overflow checking, impacting Xpdf 4.05 and earlier. Fedora advisories confirm the fix is in Xpdf 4.06 and recommend upgrading to 4.06+ to remediate. The issue is described as a local, high-attack-unc...

2.1CVSS7.2AI score0.00151EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/03/20 9:7 p.m.6 views

CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS4.6AI score0.00151EPSS
Exploits0
OSV
OSV
added 2025/03/11 7:15 a.m.7 views

CVE-2025-2174

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to integer overflow. The attack can be launched remotely. The exploit...

7.5CVSS5.7AI score0.00603EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2024-45780

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation...

6.7CVSS6.7AI score0.00262EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2024-57890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/uverbs: Prevent integer overflow issue In the expression cmd.wqesize cmd.wrcount, both variables are u32 values that come from the user so the multiplicati...

5.5CVSS6.8AI score0.00207EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-49994

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: fix integer overflow in BLKSECDISCARD I independently rediscovered commit 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155 block: fix overflow in blkioctldiscar...

5.5CVSS6.8AI score0.00238EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-4453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

7.8CVSS8.3AI score0.01565EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2020-25666

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are 4 places in HistogramCompare in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb...

4.3CVSS6.9AI score0.01163EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2024-47661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/display: Avoid overflow from uint32t to uint8t WHAT & HOW dmubrbcmd's rampingboundary has size of uint8t and it is assigned 0xFFFF. Fix it by changing i...

5.5CVSS6.7AI score0.0018EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-36968

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctlinit l2capleflowctlinit can cause both div- by-zero and an integer overflow since hdev-lemtu may not fall in...

6.5CVSS6.7AI score0.00215EPSS
Exploits0References4
Rows per page
Query Builder