Lucene search
K

16 matches found

CNNVD
CNNVD
added 2026/04/27 12:0 a.m.2 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have a resource management vulnerability. This vulnerability arises from calling a function th...

7.8CVSS7.1AI score0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.4 views

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. There is a resource management vulnerability in Foxit PDF Editor and Foxit PDF Reader. This vulnerability stems from a page lifecycle...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References1
OSV
OSV
added 2025/12/13 11:42 a.m.7 views

BIT-MONGODB-2025-12657 Malformed KMIP response may result in access violation

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS6.8AI score0.00065EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/11/11 12:57 a.m.4 views

CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS6.8AI score0.00065EPSS
Exploits0References1
OSV
OSV
added 2025/11/03 9:18 p.m.2 views

CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.5CVSS6.8AI score
Exploits0References1
NVD
NVD
added 2025/11/03 9:18 p.m.4 views

CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS0.00065EPSS
Exploits0References1
OSV
OSV
added 2025/11/03 9:18 p.m.1 views

UBUNTU-CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS5.8AI score0.00065EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/03 9:3 p.m.3 views

CVE-2025-12657 Malformed KMIP response may result in access violation

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS6.5AI score0.00065EPSS
Exploits0References1
CVE
CVE
added 2025/11/03 9:3 p.m.9 views

CVE-2025-12657

The CVE-2025-12657 issue affects the KMIP response parser built into MongoDB binaries. The parser is overly tolerant of certain malformed KMIP packets, which can cause it to construct invalid objects. Subsequent reads of these objects may trigger read access violations, as described in multiple c...

5.9CVSS6.5AI score0.00065EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.3 views

PT-2025-44795

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description The KMIP response parser within MongoDB binaries is susceptible to parsing malformed packets with excessive tolerance, potentially creating invalid objects. Subsequent reads of these objects...

5.9CVSS6.4AI score0.00065EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2025/11/03 12:0 a.m.5 views

MongoDB -- Improper Check for Unusual or Exceptional Conditions

https://jira.mongodb.org/browse/SERVER-101230 reports: The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS6.9AI score0.00065EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.4 views

SUSE CVE-2012-0781

The tidydiagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153...

5CVSS7.1AI score0.04269EPSS
Exploits10References17
RustSec
RustSec
added 2021/03/01 12:0 p.m.16 views

Deserializing an array can drop uninitialized memory on panic

The readbytesdefaultle function for T; n arrays, used to deserialize arrays of T from bytes created a T; n array with std::mem::uninitialized and then called T's deserialization method. If T's deserialization method panicked, the uninitialized memory could drop invalid objects. This flaw was...

9.8CVSS2.7AI score0.00646EPSS
Exploits0Affected Software1
OSV
OSV
added 2016/09/12 1:59 a.m.15 views

CVE-2016-7124

ext/standard/varunserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data that leads to a 1 destruct call or 2 magic method call...

9.8CVSS9.2AI score
Exploits0References10
RedHat Linux
RedHat Linux
added 2012/06/27 3:44 p.m.2 views

php: tidy_diagnose() NULL pointer dereference may cause DoS

The tidydiagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service NULL pointer dereference and application crash via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153...

5CVSS7.4AI score0.06262EPSS
Exploits11References4
securityvulns
securityvulns
added 2012/05/09 12:0 a.m.63 views

Adobe Flash Player memory corruption

Memory corruption due to invalid objects handling...

9.3CVSS1.7AI score0.90067EPSS
Exploits10Affected Software1
Rows per page
Query Builder