Lucene search
+L

64930 matches found

Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.26 views

PT-2026-48159

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A NULL pointer dereference occurs in the gf isom get user data count function within the isomedia/isom read.c file. This issue allows attackers to cause a Denial of Service DoS, which is a condition where a...

5.5CVSS5.2AI score0.00192EPSS
SaveExploits1References6
CVE
CVE
added 2026/06/09 12:0 a.m.36 views

CVE-2025-55657

GPAC MP4Box v2.4 is affected by a NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c), leading to Denial of Service when processing a crafted MP4 file. The issue’s root cause is in the handling of ODF VVC descriptor writes; exploitation details are not provided in...

7.5CVSS5.5AI score0.00467EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/06/09 12:0 a.m.46 views

CVE-2025-55657

A NULL pointer dereference in the gfodfvvccfgwritebs function odf/descriptors.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

0.00467EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.14 views

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-2258)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the require...

8.1CVSS8.3AI score0.01059EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.18 views

MongoDB Server 代码问题漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a code vulnerability in MongoDB Server, which stems from the 2dsphere...

7.1CVSS5.4AI score0.0027EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.13 views

MiracleLinux 8 : compat-openssl10-1.0.2o-4.el8_10.2 (AXSA:2026-770:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-770:01 advisory. openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVE-2026-28390 Tenable has extracted the preceding...

7.5CVSS7.8AI score0.01027EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
added 2026/06/09 12:0 a.m.28 views

OpenSSL Security Advisory 20260609

OpenSSL is susceptible to multiple security vulnerabilities. A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. The Cryptographic Message Services CMS processing fails to perform sufficient input validation on the cipher and tag...

9.8CVSS5.5AI score0.05236EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.25 views

PT-2026-47835

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can...

5.6AI score0.00508EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/09 12:0 a.m.7 views

CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

5.9CVSS6.9AI score0.00996EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/09 12:0 a.m.4 views

CVE-2026-42767

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...

5.9CVSS7AI score0.00557EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.17 views

openssl 异常处理不当漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team, capable of implementing Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure hash...

5.9CVSS5.8AI score0.00996EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.22 views

PT-2026-47837

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur in a CMP client application when processing a crafted CMP response. An attacker controlling a CMP server or acting as a man-in-the-middle can send a CRMF...

9.1CVSS5.5AI score0.01165EPSS
SaveExploits0References125
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.21 views

PT-2026-48142

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this...

5.5CVSS5.5AI score0.0013EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.24 views

PT-2026-47882

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A null pointer dereference in Windows Kerberos allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

6.5CVSS5.4AI score0.00903EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/06/09 12:0 a.m.9 views

CVE-2025-55651

A NULL pointer dereference in the gfisomgetuserdatacount function isomedia/isomread.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5AI score0.00192EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.25 views

PT-2026-48160

🚨 CVE-2025-55657 A NULL pointer dereference in the gf odf vvc cfg write bs function odf/descriptors.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. 🎖@cveNotify...

7.5CVSS5.2AI score0.00467EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.28 views

PT-2026-47834

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...

7.5CVSS5.5AI score0.01165EPSS
SaveExploits0References104
CVE
CVE
added 2026/06/09 12:0 a.m.38 views

CVE-2025-55651

CVE-2025-55651 describes a NULL pointer dereference in GPAC MP4Box v2.4, within gf_isom_get_user_data_count (isomedia/isom_read.c). The vulnerability can cause a Denial of Service when processing a crafted MP4 file. The connected sources confirm a PoC exists, but no specific patch/version or reme...

5.5CVSS5.5AI score0.00192EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/06/09 12:0 a.m.50 views

CVE-2025-55659

A NULL pointer dereference in the cttsboxwrite function isomedia/boxcodebase.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

0.00345EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.22 views

PT-2026-48162

🚨 CVE-2025-55659 A NULL pointer dereference in the ctts box write function isomedia/box code base.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. 🎖@cveNotify...

6.5CVSS5.3AI score0.00345EPSS
SaveExploits1References4
Rows per page
Query Builder