Lucene search
K

17 matches found

NVD
NVD
added 2026/05/29 8:16 p.m.17 views

CVE-2026-45613

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS0.00111EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/29 7:7 p.m.12 views

CVE-2026-45613

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS5.8AI score0.00111EPSS
Exploits0References3
CVE
CVE
added 2026/05/29 7:7 p.m.19 views

CVE-2026-45613

CVE-2026-45613 affects Rizin; a heap-buffer-overflow is reported in the OMF parser (librz/bin/format/omf/omf.c). The vulnerability is mitigated by the commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47. CVSSv3.1 vector from the entry: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N with base score 3.3 (LOW). Th...

3.3CVSS5.8AI score0.00111EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/04/23 1:28 a.m.5 views

SUSE CVE-2026-6846

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...

7.8CVSS5.9AI score0.00159EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/23 3:30 p.m.6 views

EUVD-2026-14435

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

6.1CVSS5.7AI score0.00162EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/03/23 1:37 p.m.3 views

CVE-2026-4647

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...

6.1CVSS5.6AI score0.00162EPSS
Exploits0References4
CVE
CVE
added 2025/08/13 8:51 p.m.17 views

CVE-2011-10010

The CVE-2011-10010 entry affects QuickShare File Server 1.2.1 and describes a path traversal flaw in the FTP service caused by improper sanitation of user-supplied file paths. Authenticated users can submit crafted sequences to access/write files outside the virtual directory, and when the Writab...

9.4CVSS8.3AI score0.01485EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/08/13 8:51 p.m.3 views

CVE-2011-10010 QuickShare File Server 1.2.1 Path Traversal RCE

QuickShare File Server 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this flaw by submitting crafted sequences to access or write files outside the intended virtual directory. When the...

9.4CVSS8.3AI score0.01485EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.5 views

PT-2025-33079 · Unknown · Quickshare File Server

Name of the Vulnerable Software and Affected Versions: QuickShare File Server version 1.2.1 Description: QuickShare File Server version 1.2.1 contains a path traversal vulnerability in its FTP service due to improper sanitation of user-supplied file paths. Authenticated users can exploit this fla...

9.4CVSS7.5AI score0.01485EPSS
Exploits0References9
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.3 views

Configure Audit Rules for User Information Changes

Generally, for deployed services, users and user groups do not change. Passwords, however, are changed periodically but not frequently due to validity periods. It is recommended that key authentication and authorization data be audited and monitored so that changes can be traced. Performing attac...

6.9AI score
Exploits0References2
CNNVD
CNNVD
added 2022/09/13 12:0 a.m.5 views

LIEF 代码问题漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. LIEF suffers from a code issue vulnerability that stems from a segmentation violation found in the LIEF::MachO::SegmentCommand::fileoffset function in...

5.5CVSS5.8AI score0.00291EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.4 views

The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.

The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...

8.8CVSS7.6AI score0.01127EPSS
Exploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/07/20 12:0 a.m.28 views

openSUSE Security Update : nasm (openSUSE-2020-952)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...

7.8CVSS6.5AI score0.05166EPSS
Exploits14References27
Tenable Nessus
Tenable Nessus
added 2020/07/20 12:0 a.m.32 views

openSUSE Security Update : nasm (openSUSE-2020-954)

This update for nasm fixes the following issues : nasm was updated to version 2.14.02. This allows building of Mozilla Firefox 78ESR and also contains lots of bugfixes, security fixes and improvements. - Fix crash due to multiple errors or warnings during the code generation pass if a list file i...

7.8CVSS6.5AI score0.05166EPSS
Exploits14References27
CNVD
CNVD
added 2018/03/21 12:0 a.m.2 views

Joyent SmartOS Elevation of Privilege Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, Inc. in the United States. A security vulnerability exists in the DTrace DOF file in the Joyent SmartOS release-20170803-20170803T064301Z, which stems from a program that makes it difficult to correctly validate user-submitted...

7CVSS6.6AI score0.00447EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/07 12:0 a.m.2 views

GNU Binutils 'bfd_mach_o_i386_canonicalize_one_reloc' function out-of-bounds heap read vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

7.8CVSS6.8AI score0.01493EPSS
Exploits0References1
OSV
OSV
added 2017/04/12 11:59 p.m.2 views

DEBIAN-CVE-2017-7704

In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dof.c by using a different integer data type and adjusting a return value...

7.5CVSS7.5AI score0.02709EPSS
Exploits0References1
Rows per page
Query Builder