Lucene search
K

27 matches found

Cvelist
Cvelist
added 2025/11/29 1:57 a.m.7 views

CVE-2025-66217 AIS-catcher Integer Underflow in MQTT Packet Parsing leading to Heap Buffer Overflow

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Leng...

8.8CVSS0.00758EPSS
Exploits1References2
CNVD
CNVD
added 2025/11/14 12:0 a.m.1 views

Adobe Illustrator on iPad Integer Dive Vulnerability (CNVD-2025-28650)

Adobe Illustrator on iPad is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator on iPad suffers from an integer sneak vulnerability that can be exploited by an attacker to cause arbitrary code execution in the current user environment...

7.8CVSS7.8AI score0.00027EPSS
Exploits0References1
CNVD
CNVD
added 2025/11/14 12:0 a.m.1 views

Adobe Illustrator on iPad Integer Dive Vulnerability

Adobe Illustrator on iPad is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator on iPad suffers from an integer sneak vulnerability that can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

7.8CVSS7.3AI score0.00027EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-5603

Malware in sbrugna...

7.5CVSS7.6AI score0.00237EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2003-0367

Malware in sbrugna...

4.6CVSS6.4AI score0.00172EPSS
Exploits0References4
CNVD
CNVD
added 2025/02/17 12:0 a.m.5 views

Adobe Illustrator Integer Latent Vulnerability

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.5AI score0.00069EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/01/10 12:0 a.m.7 views

CVE-2024-57823

In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptorurinormalizepath...

9.3CVSS8.2AI score0.0004EPSS
Exploits1
CNVD
CNVD
added 2024/12/13 12:0 a.m.9 views

Adobe Animate Integer Latent Vulnerability (CNVD-2024-48902)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. Adobe Animate suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

7.8CVSS7.5AI score0.00103EPSS
Exploits0References1
CNVD
CNVD
added 2024/12/13 12:0 a.m.12 views

Adobe Bridge Integer Latent Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an integer latency vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

7.8CVSS7.4AI score0.00191EPSS
Exploits0References1
Prion
Prion
added 2023/01/05 3:15 p.m.9 views

Integer overflow

GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gfhevcreadspsbsinternal function of mediatools/avparsers.c:8316...

3.3CVSS7AI score0.00132EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2022/08/30 3:5 a.m.28 views

CVE-2022-24106

In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...

7.8CVSS7.5AI score0.00099EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2022/04/18 9:0 p.m.2 views

CVE-2022-24106

In Xpdf prior to 4.04, the DCT JPEG decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc...

7.8CVSS5.4AI score0.00099EPSS
Exploits0References5
OSV
OSV
added 2021/02/22 12:15 a.m.21 views

CVE-2021-27514

EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass such as in CVE-2021-27513 exploitation...

9.8CVSS8.9AI score
Exploits0References2
CVE
CVE
added 2021/02/21 11:5 p.m.67 views

CVE-2021-27514

CVE-2021-27514 affects EyesOfNetwork 5.3-10. The session management uses an 8–10 digit session ID, which could enable brute-force authentication bypass. Publicly documented details state this configuration risk and relate it to CVE-2021-27513 exploitation. Connected sources confirm the affected p...

9.8CVSS8.8AI score0.13672EPSS
Exploits2References2Affected Software1
Prion
Prion
added 2018/07/09 6:29 a.m.13 views

Integer overflow

The mintToken function of a smart contract implementation for TheFlashToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...

5CVSS7.7AI score0.00237EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2018/06/15 3:0 p.m.738 views

CVE-2018-12458

An improper integer type in the mpeg4encodegopheader function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while converting a crafted AVI file to MPEG4, leading to a denial of service...

6.5CVSS6.5AI score0.00571EPSS
Exploits0
Prion
Prion
added 2017/06/06 6:29 p.m.21 views

Design/Logic Flaw

game-music-emu before 0.6.1 mishandles unspecified integer values...

10CVSS6.9AI score0.02847EPSS
Exploits1References12Affected Software6
OpenVAS
OpenVAS
added 2016/11/27 12:0 a.m.54 views

Debian Security Advisory DSA 3725-1 (icu - security update)

Several vulnerabilities were discovered in the International Components for Unicode ICU library. CVE-2014-9911 Michele Spagnuolo discovered a buffer overflow vulnerability which might allow remote attackers to cause a denial of service or possibly execute arbitrary code via crafted text...

10CVSS1.6AI score0.11054EPSS
Exploits2References1
Cvelist
Cvelist
added 2013/05/15 1:0 a.m.24 views

CVE-2013-1327

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."...

7.4AI score0.58631EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2009/10/30 8:30 p.m.18 views

CVE-2009-3829

Integer overflow in wiretap/erf.c in Wireshark before 1.2.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted erf file, related to an "unsigned integer wrap vulnerability."...

9.3CVSS6.2AI score0.06133EPSS
Exploits1References1
Rows per page
Query Builder