Lucene search
+L

6244 matches found

PyPA
PyPA
•added 2025/08/29 7:15 p.m.•19 views

PYSEC-2025-240

Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can...

7.8CVSS6.8AI score0.00272EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-28581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the assignPixel function when readin...

8.4CVSS6.3AI score0.00355EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2024-28583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the readLine function when reading...

7.8CVSS6.2AI score0.00369EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2024-6563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in Renesas arm- trusted-firmware allows Local Execution of Code. This...

7.5CVSS6.3AI score0.00211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2023-51791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulenrability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavcodec/jpegxlparser.c in genaliasmap...

7.8CVSS7.5AI score0.00273EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2024-28580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the ReadData function when reading...

8.4CVSS6.4AI score0.00355EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•2 views

Linux Distros Unpatched Vulnerability : CVE-2023-51793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavutil/imgutils.c:353:9 in...

7.8CVSS6.7AI score0.00321EPSS
SaveExploits0References2
Mend
Mend
•added 2025/08/26 10:48 p.m.•7 views

CVE-2025-22407

In hiddcheckconfigdone of hiddconn.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.8CVSS6.8AI score0.00084EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/26 10:48 p.m.•105 views

CVE-2025-22406

Google Android is susceptible to a memory misreference vulnerability (specifically a use after free ) within the bnep_utils.cc component. The flaw originates from a mix-up in the bnepu_check_send_packet instruction responsible for freeing memory. An attacker can exploit this to achieve code execu...

8.4CVSS6.3AI score0.001EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2025/08/26 5:15 p.m.•31 views

CVE-2025-1994

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function...

7.8CVSS6.7AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/26 5:15 p.m.•18 views

CVE-2025-1994

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function...

7.8CVSS0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/26 4:49 p.m.•26 views

CVE-2025-1994 IBM Cognos Command Center code execution

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function...

7.8CVSS0.00162EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/26 4:49 p.m.•6 views

CVE-2025-1994 IBM Cognos Command Center code execution

IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function...

7.8CVSS6.7AI score0.00162EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/26 12:00 a.m.•15 views

IBM Cognos Command Center security vulnerabilities

IBM Cognos Command Center is a solution for automating business processes that simplifies operational complexity across multiple software environments by allowing users to view, execute and monitor automated processes through a single interface. A code execution vulnerability exists in IBM Cognos...

7.8CVSS6.9AI score0.00162EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2024-28582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the rgbeRGBEToFloat function when...

8.4CVSS6.3AI score0.00356EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2024-28569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::Xdr::read function when...

7.8CVSS6.2AI score0.00343EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2025/08/26 12:00 a.m.•30 views

Cursor security vulnerabilities

Cursor is an AI code editor from Cursor open source. A security vulnerability exists in Cursor version 15.4.1, which stems from a RunAsNode misconfiguration, and could lead to the execution of arbitrary code by a local attacker...

4.8CVSS6.2AI score0.00163EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/24 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modifyuserhwbreakpoint that can result in crash and possibly memory corruption. This...

5.5CVSS7AI score0.01214EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/23 9:22 p.m.•25 views

CVE-2010-20114

VariCAD EN up to and including version 2010-2.05 is vulnerable to a stack-based buffer overflow when parsing .dwb drawing files. The application fails to properly validate the length of input data embedded in the file, allowing a crafted .dwb file to overwrite critical memory structures. This fla...

8.4CVSS8AI score0.00409EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/23 9:22 p.m.•31 views

CVE-2010-20123

Steinberg MyMP3Player version 3.0 build 3.0.0.67 is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to overwrite critical memory structures and...

8.4CVSS8.1AI score0.00409EPSS
SaveExploits1References1
Rows per page
Query Builder