Lucene search
K

5062 matches found

NVD
NVD
added 2026/02/02 4:16 p.m.6 views

CVE-2025-47397

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors...

7.8CVSS0.00092EPSS
Exploits0References1
CVE
CVE
added 2026/02/02 3:20 p.m.11 views

CVE-2025-47397

CVE-2025-47397 describes a memory corruption vulnerability in GPU memory mapping using scatter-gather lists caused by unchecked IOMMU mapping errors. Affected component is involved in GPU memory mapping; the issue is exploitable locally with low privileges and no user interaction, with high impac...

7.8CVSS5.3AI score0.00092EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/02 3:20 p.m.4 views

CVE-2025-47397 Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors...

7.8CVSS5.3AI score0.00092EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/02 3:20 p.m.28 views

CVE-2025-47397 Improper Release of Memory Before Removing Last Reference in Graphics

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors...

7.8CVSS0.00092EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/02 3:20 p.m.5 views

EUVD-2025-206609

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors...

7.8CVSS5.3AI score0.00092EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/02 12:0 a.m.6 views

PT-2026-5675

Memory Corruption when initiating GPU memory mapping using scatter-gather lists due to unchecked IOMMU mapping errors...

7.8CVSS5.3AI score0.00092EPSS
Exploits0References1
NVD
NVD
added 2026/01/30 9:15 a.m.6 views

CVE-2025-1395

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing proce...

8.2CVSS0.00299EPSS
Exploits0References2
CVE
CVE
added 2026/01/30 8:31 a.m.13 views

CVE-2025-1395

The CVE-2025-1395 entry describes a vulnerability in Codriapp Innovation and Software Technologies Inc.’s HeyGarson where error messages may expose sensitive information. The issue is triggered by fuzzing for application mapping and affects HeyGarson up to 30012026. The available connected docume...

8.2CVSS5.4AI score0.00299EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/30 8:31 a.m.4 views

EUVD-2025-206579

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping.This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing proces...

8.2CVSS5.9AI score0.00299EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/30 8:31 a.m.3 views

CVE-2025-1395

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing proce...

8.2CVSS5.4AI score0.00299EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/30 8:31 a.m.5 views

CVE-2025-1395 Sensitive Data Exposure in CoDeriApp's HeyGarson

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing proce...

8.2CVSS5.4AI score0.00299EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/30 8:31 a.m.29 views

CVE-2025-1395 Sensitive Data Exposure in CoDeriApp's HeyGarson

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted several times to verifying fixing proce...

8.2CVSS0.00299EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/30 12:0 a.m.6 views

PT-2026-5385

Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping.This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted early about this disclosure but did not...

8.2CVSS5.9AI score0.00299EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/30 12:0 a.m.4 views

Codriapp HeyGarson security vulnerability

Codriapp HeyGarson is a digital ordering and management platform developed by Codriapp. Versions of Codriapp HeyGarson dated before January 30, 2026, have security vulnerabilities. These vulnerabilities stem from error messages containing sensitive information, which may lead to application mappi...

8.2CVSS5.8AI score0.00299EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/01/28 8:54 a.m.159 views

Exploit for Out-of-bounds Read in Openssl

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartble...

7.5CVSS5.9AI score0.99999EPSS
Exploits87
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/28 3:24 a.m.7 views

Malicious code in json-mapping-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d9a56e7e0fdb852db49a56abffcdded34d184708b167002fe2e199438063aa The package json-mapping-web was found to contain malicious code. Source: ghsa-malware 37a8fbc4bd325b28e53dce222bdb8b8e10ff6f5559edb6e97605e1ee5cec17...

5.8AI score
Exploits0References1
Snyk
Snyk
added 2026/01/28 3:24 a.m.3 views

Malicious Package

Overview json-mapping-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2026/01/28 3:24 a.m.4 views

MAL-2026-552 Malicious code in json-mapping-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d9a56e7e0fdb852db49a56abffcdded34d184708b167002fe2e199438063aa The package json-mapping-web was found to contain malicious code. Source: ghsa-malware 37a8fbc4bd325b28e53dce222bdb8b8e10ff6f5559edb6e97605e1ee5cec17...

5.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/28 12:0 a.m.6 views

RHEL 9 : kernel-rt (RHSA-2026:1443)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1443 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

7.8CVSS7.4AI score0.00335EPSS
Exploits0References30
Xen Project
Xen Project
added 2026/01/27 12:0 p.m.8 views

varstored: TOCTOU issues with mapped guest memory

ISSUE DESCRIPTION varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the...

6.4AI score
Exploits0
Rows per page
Query Builder