Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-9492

Malicious code in bioql PyPI...

5.3CVSS5.5AI score0.00195EPSS
Exploits0References8
OSV
OSV
added 2025/04/01 9:31 p.m.4 views

GHSA-6XFJ-HHWH-R3C2 Ouch Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdatetime of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploi...

5.3CVSS7.1AI score0.00195EPSS
Exploits0References9
NVD
NVD
added 2025/04/01 9:15 p.m.3 views

CVE-2024-13941

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdatetime of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploi...

5.3CVSS0.00195EPSS
Exploits0References7
OSV
OSV
added 2025/04/01 9:15 p.m.1 views

CVE-2024-13941

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdatetime of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploi...

4.8CVSS7.1AI score
Exploits0References7
CVE
CVE
added 2025/04/01 9:0 p.m.39 views

CVE-2024-13941

CVE-2024-13941 affects ouch-org/ouch up to version 0.3.1. The vulnerability is in ouch::archive::zip::convert_zip_date_time (zip.rs) where manipulating the month parameter leads to memory corruption. Attack requires local access; exploit was disclosed publicly. Upgrading to 0.4.0 mitigates the is...

5.3CVSS7.1AI score0.00195EPSS
Exploits0References7
Cvelist
Cvelist
added 2025/04/01 9:0 p.m.11 views

CVE-2024-13941 ouch-org ouch zip.rs convert_zip_date_time memory corruption

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdatetime of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploi...

5.3CVSS0.00195EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/04/01 9:0 p.m.8 views

CVE-2024-13941 ouch-org ouch zip.rs convert_zip_date_time memory corruption

A vulnerability was found in ouch-org ouch up to 0.3.1. It has been classified as critical. This affects the function ouch::archive::zip::convertzipdatetime of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attack needs to be approached locally. The exploi...

5.3CVSS7.1AI score0.00195EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/04/01 12:0 a.m.1 views

Ouch 缓冲区错误漏洞

Ouch is an application from the Ouch open source. A buffer error vulnerability exists in Ouch 0.3.1 and earlier versions, which stems from memory corruption due to the operation of the MONTH parameter...

5.3CVSS5.6AI score0.00195EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/04/01 12:0 a.m.2 views

PT-2025-14387 · Ouch · Ouch

Name of the Vulnerable Software and Affected Versions: ouch-org ouch versions up to 0.3.1 Description: A critical issue has been found, affecting the function ouch::archive::zip::convert zip date time of the file zip.rs. The manipulation of the argument month leads to memory corruption. The attac...

5.3CVSS5.2AI score0.00195EPSS
Exploits0References13
OSV
OSV
added 2024/09/23 8:47 p.m.9 views

GHSA-2WQ5-G96F-MV3V Ouch! allows a segmentation fault due to use of uninitialized memory

When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...

5.1CVSS7.1AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/09/23 8:47 p.m.8 views

Ouch! allows a segmentation fault due to use of uninitialized memory

When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...

7.1AI score
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/23 12:0 a.m.0 views

PT-2024-40036 · Ouch · Ouch

Name of the Vulnerable Software and Affected Versions: ouch affected versions not specified Description: The issue arises when attempting to decompress a file using ouch. It involves reaching the function ouch::archive::zip::convert zip date time, which contains an unsafe function, transmute. Thi...

5.1CVSS6.9AI score
Exploits0References4
RustSec
RustSec
added 2024/09/22 12:0 p.m.3 views

Segmentation fault due to use of uninitialized memory

When trying to decompress a file using "ouch", we can reach the function "ouch::archive::zip::convertzipdatetime". In the function, there is a unsafe function, "transmute". Once the "transmute" function is called to convert the type of "month" object, the address of the object is changed to the...

7.1AI score
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/22 12:0 a.m.1 views

PT-2024-40921 · Ouch · Ouch

Name of the Vulnerable Software and Affected Versions: ouch affected versions not specified Description: The issue arises when attempting to decompress a file using ouch. It involves reaching the function ouch::archive::zip::convert zip date time, where an unsafe function, transmute, is called...

6.9AI score
Exploits0References4
Rows per page
Query Builder