Lucene search
K

14 matches found

Debian CVE
Debian CVE
added 2026/02/24 1:43 a.m.3 views

CVE-2026-25985

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate 674 GB of memory, leading to an out-of-memory abort. Versions...

7.5CVSS7.7AI score0.00019EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/10/15 5:44 p.m.2 views

CVE-2025-55338

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

6.1CVSS6.7AI score0.00344EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-3424

Malware in sbrugna...

4CVSS6.8AI score0.00117EPSS
Exploits0References9
NVD
NVD
added 2025/07/01 3:15 a.m.2 views

CVE-2024-46993

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath and nativeImage.createFromBuffer functions call a function downstream that is vulnerable to a heap...

7.3CVSS0.00046EPSS
Exploits0References1
NVD
NVD
added 2025/06/06 6:15 p.m.11 views

CVE-2025-47950

CoreDNS is a DNS server that chains plugins. In versions prior to 1.12.2, a Denial of Service DoS vulnerability exists in the CoreDNS DNS-over-QUIC DoQ server implementation. The server previously created a new goroutine for every incoming QUIC stream without imposing any limits on the number of...

7.5CVSS0.00151EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/02/12 6:21 p.m.10 views

CVE-2025-25283 parse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memory

parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to 50ms per one operation, with a varying size from...

7.5CVSS0.00117EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 2:59 p.m.6 views

CVE-2020-15193

In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of dlpack.todlpack can be made to use uninitialized memory resulting in further memory corruption. This is because the pybind11 glue code assumes that the argument is a tensor. However, there is nothing stopping users from passing ...

7.1CVSS6.6AI score0.00215EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2023/06/07 12:0 a.m.3 views

PT-2023-5269 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. through 8.0.28 PHP versions 8.1. through 8.1.19 PHP versions 8.2. through 8.2.6 Description: The issue is related to the use of a random value generator with a narrower range of values than it should have when using SOAP HTT...

9.8CVSS7AI score0.29385EPSS
Exploits16References184
Mageia
Mageia
added 2019/08/31 1:22 p.m.19 views

Updated graphicsmagick packages fix security issues

This is a maintenance and security update fixing various memory leaks, overflows, out-of-memory, heap overwriting and other issues...

2.5AI score
Exploits0References2
ThreatPost
ThreatPost
added 2015/01/14 4:0 p.m.12 views

Skeleton Key Malware Bypasses Active Directory Authentication

Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...

0.7AI score
Exploits0References2
Cent OS
Cent OS
added 2013/11/26 1:32 p.m.68 views

samba4 security update

CentOS Errata and Security Advisory CESA-2013:1543 Updated samba4 packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CV...

5CVSS7AI score0.83531EPSS
Exploits7References7
securityvulns
securityvulns
added 2012/03/17 12:0 a.m.49 views

nginx fix for malformed HTTP responses from upstream servers

Hello, The nginx team has released stable version 1.0.14, and development version 1.1.17 of nginx web server, which include a fix for malformed HTTP responses from upstream servers: http://trac.nginx.org/nginx/changeset/4535/nginx http://trac.nginx.org/nginx/changeset/4531/nginx...

1AI score
Exploits0
Oracle linux
Oracle linux
added 2012/03/01 12:0 a.m.78 views

ImageMagick security and bug fix update

6.2.8.0-12.el5 - Add fix for CVE-2010-4167 767142 6.2.8.0-11.el5 Fix assertion failed when using 'identify -verbose' when theres no image information available 502626 6.2.8.0-10.el5 Fix memory allocation failure when using color option 616538 Fix hang when converting broken GIF 693989 Fix...

9.3CVSS2.8AI score0.10772EPSS
Exploits3
Metasploit
Metasploit
added 2011/02/26 5:56 a.m.42 views

Windows Escalate Locked Desktop Unlocker

This module unlocks a locked Windows desktop by patching the respective code inside the LSASS.exe process. This patching process can result in the target system hanging or even rebooting, so be careful when using this module on production systems. This module requires Metasploit:...

7.1AI score
Exploits0
Rows per page
Query Builder