Lucene search
K

3785 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/01 12:0 a.m.1 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the swapping of pointers, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.4AI score0.00213EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/01 12:0 a.m.4 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data beyond the buffer in memory, allows attackers to circumvent ASLR protection and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

5.5CVSS6.1AI score0.0024EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/01 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer font automation tool, related to the use of memory after it is freed, allows attackers to bypass the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to bypass ASLR protection and gain unauthorized access to protected information...

5.5CVSS5.4AI score0.0025EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2025/06/30 12:0 a.m.4 views

Ubuntu: Security Advisory (USN-7600-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.5AI score0.01092EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/30 12:0 a.m.1 views

PT-2025-35964

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the pNFS block/scsi layout implementation. The issue arises from a dereference of uninitialized pointers within the ext tree free commitdata function...

5.5CVSS6.3AI score0.00166EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/06/30 12:0 a.m.4 views

The vulnerability of the H5O__layout_encode function in the H5Olayout.c component of the HDF file processing library allows a attacker to cause a service failure.

The vulnerability of the H5Olayoutencode function in the H5Olayout.c component of the HDF file processing library is related to the escape of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially created...

6.5CVSS6.8AI score0.01348EPSS
Exploits1References7Affected Software3
Ubuntu
Ubuntu
added 2025/06/26 1:53 p.m.5 views

USN-7600-1: libxslt vulnerability

It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization ASLR protections...

6.5CVSS7.1AI score0.01092EPSS
Exploits0
OSV
OSV
added 2025/06/26 1:53 p.m.1 views

USN-7600-1 libxslt vulnerability

It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization ASLR protections...

6.5CVSS7.2AI score0.01092EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/06/25 12:0 a.m.1 views

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...

6.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/23 2:56 p.m.3 views

Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/06/23 2:56 p.m.2 views

MAL-2025-5227 Malicious code in gs_isotope-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc9cf2e5331d05d054643fdf750024a8608fd9527d09ee3b9f0ce18a0a424064 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.2 views

The vulnerability of the _pnfs_return_layout() function in the fs/nfs/pnfs.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the pnfsreturnlayout function in the fs/nfs/pnfs.c module of the Linux kernel file system lies in the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00227EPSS
Exploits0References18Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/20 3:47 p.m.4 views

Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2025/06/20 3:47 p.m.2 views

MAL-2025-5200 Malicious code in postcss-layout-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 462502060afb8b130fe73ec2cf8940f9cc7e7d86e3a70ad48606a6b1b4484231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/06/19 3:42 a.m.2 views

SUSE CVE-2022-50072

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call...

5.5CVSS6.3AI score0.00161EPSS
Exploits0References11
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/18 4:2 p.m.4 views

Malicious code in dijit.layout.bordercontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268d7fbff2e8226f7aafd1f838c0cbd16e53ea3d1542e81c9771945ebc3bf7da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/18 4:2 p.m.4 views

Malicious code in dojox.layout.expandopane (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4d8c95926f5af3cacdfd043cd5ec597124451062eac060c9d24c418bf4d7fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2025/06/18 4:2 p.m.3 views

MAL-2025-5155 Malicious code in dijit.layout.bordercontainer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268d7fbff2e8226f7aafd1f838c0cbd16e53ea3d1542e81c9771945ebc3bf7da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/06/17 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00286EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/06/10 5:23 p.m.3 views

CVE-2025-47104

InDesign Desktop versions ID20.2, ID19.5.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

5.5CVSS5.8AI score0.0024EPSS
Exploits0References1
Rows per page
Query Builder