Lucene search
+L

22010 matches found

RedhatCVE
RedhatCVE
added 2025/11/04 4:09 p.m.20 views

CVE-2025-36092

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS5.9AI score0.00422EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/04 12:20 a.m.18 views

CVE-2025-46556 MantisBT is Vulnerable to Denial-of-Service (DoS) attack via Excessive Note Length

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters due to a lack of server-side validation of note length. Once such a note is added,...

6.5CVSS0.00384EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/04 12:20 a.m.9 views

EUVD-2025-37509

Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.27.1 and below allow attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters due to a lack of server-side validation of note length. Once such a note is added,...

6.5CVSS6.2AI score0.00384EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/11/04 12:00 a.m.21 views

CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target...

0.0041EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/04 12:00 a.m.26 views

CVE-2025-27374

CVE-2025-27374 affects Samsung’s Secure Boot component on Exynos Mobile/Wearable Processors (models listed in the document). The issue is a missing length check that can lead to out-of-bounds writes. The connected records repeatedly describe the same flaw but do not provide concrete exploit detai...

5.3CVSS6.5AI score0.00293EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/04 12:00 a.m.6 views

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2025-25733)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25733 advisory. - i40e: add validation for ringlen param Lukasz Czapnik Orabug: 38603025 CVE-2025-39973 Tenable has extracted the preceding description block directly from...

8.8CVSS6.5AI score0.00144EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/11/04 12:00 a.m.17 views

CVE-2025-27374

An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes...

0.00293EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/04 12:00 a.m.11 views

PT-2025-45048

🚨 CVE-2025-27374 An issue was discovered in the Secure Boot component in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, 1080, 1280, 2200, 1330, 1380, 1480, 2400. The lack of a length check leads to out-of-bounds writes. 🎖@cveNotify...

5.3CVSS6.8AI score0.00293EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/11/04 12:00 a.m.9 views

CVE-2024-56426

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, W920, W930, W1000. The lack of a length check leads to out-of-bounds writes via malformed USB packets to the target...

6.5AI score0.0041EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/04 12:00 a.m.9 views

MantisBT 安全漏洞

MantisBT is a Web-based open source defect tracking system from the MantisBT team. The system provides project management and defect tracking services in a web-operated format. A security vulnerability exists in MantisBT 2.27.1 and earlier versions, which stems from an unvalidated comment length...

7.5CVSS6.5AI score0.00384EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/03 6:31 p.m.25 views

EUVD-2025-37500

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS5.9AI score0.00422EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/11/03 5:07 p.m.12 views

MantisBT Vulnerable to Denial-of-Service (DoS) via Excessive Note Length

A lack of server-side validation for note length in MantisBT allows attackers to permanently corrupt issue activity logs by submitting extremely long notes tested with 4,788,761 characters. Once such a note is added: Impact - The entire activity stream becomes unviewable UI fails to render. - New...

7.5CVSS6.8AI score0.00384EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2025/11/03 4:15 p.m.8 views

CVE-2025-36092

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/03 4:15 p.m.9 views

CVE-2025-36092

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS0.00422EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/11/03 4:00 p.m.6 views

kernel: net: usb: smsc75xx: Limit packet length to skb->len

In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Limit packet length to skb-len Packet length retrieved from skb data may be larger than the actual socket buffer length up to 9026 bytes. In such case the cloned skb passed up the network stack will leak kerne...

5.5CVSS6.7AI score0.00178EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/03 3:15 p.m.5 views

CVE-2025-36092 IBM Business Automation Insights improper input validation

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS6AI score0.00422EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/03 3:15 p.m.31 views

CVE-2025-36092

CVE-2025-36092 affects IBM Cloud Pak for Business Automation (25.0.0, 24.0.1, 24.0.0) and stems from improper validation of input length, allowing an authenticated user to cause a denial of service. IBM’s sources confirm the issue and provide targeted fixes: 25.0.0 should install security fix 25....

6.5CVSS6AI score0.00422EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/11/03 3:15 p.m.31 views

CVE-2025-36092 IBM Business Automation Insights improper input validation

IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper validation of input length...

6.5CVSS0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/03 3:08 p.m.13 views

CLSA-2025-1762182516 libqb: Fix of CVE-2023-39976

CVE-2023-39976: Fix buffer overflow in logblackbox.c by correctly limiting log message length...

9.8CVSS7.3AI score0.01182EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/03 2:59 p.m.11 views

CLSA-2025-1762181946 frr: Fix of CVE-2023-38406

CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors...

9.8CVSS7.2AI score0.00939EPSS
SaveExploits0References1
Rows per page
Query Builder