Lucene search
+L

234 matches found

Positive Technologies
Positive Technologies
•added 2026/09/25 12:00 a.m.•7 views

PT-2026-98544

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the fbdev vfb component. The FBIOGETCMAP ioctl takes a shallow snapshot of info-cmap and performs a usercopy after releasing info-lock. However, vfb...

9.8CVSS5.9AI score0.00443EPSS
SaveExploits0References411
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•18 views

PT-2026-70619

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

5.5CVSS5.7AI score0.00541EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/10 12:00 a.m.•13 views

PT-2026-69794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the Bluetooth MGMT component. The MGMT OP LOAD CONN PARAM operation queues the conn update sync function when a parameter update modifies an existin...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•5 views

PT-2026-76082

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS7.2AI score0.00128EPSS
SaveExploits0References5
Redos
Redos
•added 2026/07/22 12:00 a.m.•16 views

ROS-20260722-73-0029

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the permitted range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.3CVSS6.1AI score0.00229EPSS
SaveExploits0
CNVD
CNVD
•added 2026/07/15 12:00 a.m.•26 views

Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)

Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...

5.5CVSS5.9AI score0.00595EPSS
SaveExploits0
Mend
Mend
•added 2026/06/30 10:08 p.m.•2 views

CVE-2026-56361

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS7.2AI score0.00128EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•3 views

CVE-2026-56361: Out-of-bounds Read

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS7.2AI score0.00128EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•8 views

CVE-2026-56361: Out-of-bounds Read

ImageMagick before 7.1.2-19 contains an off-by-one error in morphology validation allowing out-of-bounds heap buffer reads. Attackers can trigger heap buffer overflow by providing incorrect morphology parameters causing single pixel memory access violations...

7.1CVSS7.2AI score0.00128EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/05/08 5:57 p.m.•25 views

CVE-2025-71300

A flaw was found in the Linux kernel, specifically within the OP-TEE Open Portable Trusted Execution Environment integration with U-Boot. The U-Boot's OP-TEE logic automatically injects a reserved-memory node into the kernel device tree. However, a manually defined OP-TEE node in zynqmp.dtsi...

7.8CVSS5.8AI score0.00145EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/05/08 1:15 p.m.•62 views

CVE-2025-71300 Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"

In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe. OP-TEE logic in U-Boot automatically injects a reserved-memory node along with optee firmware node to...

7.8CVSS0.00145EPSS
SaveExploits0References4
osv-cve
osv-cve
•added 2026/05/08 1:15 p.m.•18 views

CVE-2025-71300 Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"

In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe. OP-TEE logic in U-Boot automatically injects a reserved-memory node along with optee firmware node to...

7.8CVSS5.9AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/08 12:00 a.m.•4 views

CVE-2025-71300: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: zynqmp: Add an OP-TEE node to the device tree" This reverts commit 06d22ed6b6635b17551f386b50bb5aaff9b75fbe. OP-TEE logic in U-Boot automatically injects a reserved-memory node along with optee firmware node to...

7.8CVSS6AI score0.00145EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/09 3:16 p.m.•21 views

CVE-2026-5443

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

9.8CVSS0.00875EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/05 8:45 p.m.•48 views

CVE-2019-25677

WinRAR 5.61 is affected by a local-denial-of-service vulnerability caused by a malformed winrar.lng language file in the installation directory. When a user opens an archive and clicks the Test button, the program may crash due to an access violation at memory address 004F1DB8 while reading inval...

6.9CVSS5.8AI score0.00427EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/05 8:45 p.m.•11 views

CVE-2019-25677 WinRAR 5.61 Denial of Service via Malformed Language File

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.8AI score0.00427EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/04/05 8:45 p.m.•17 views

CVE-2019-25677

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.8AI score0.00427EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/04/05 12:00 a.m.•45 views

PT-2026-30485

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violatio...

6.9CVSS5.9AI score0.00427EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2026/03/18 12:00 a.m.•19 views

amdgpu_vm_sdma_update Heap Buffer Overflow DoS

The vulnerability of the amdgpuvmsdmaupdate function in the drivers/gpu/drm/amd/amdgpu/amdgpuvmsdma.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to access violations when using shared resources. Exploiting this vulnerability c...

5.5CVSS7.2AI score0.00166EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/03/06 12:00 a.m.•22 views

VMware Workstation Heap Buffer Overflow DoS

The vulnerability of VMware Workstation’s hypervisor is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

2.7CVSS5.8AI score0.00178EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder