Lucene search
K

148 matches found

OSV
OSV
added 2026/04/09 4:16 p.m.3 views

UBUNTU-CVE-2026-39853

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS7 signature, the code copies the digest value from a parsed...

7.8CVSS6.1AI score0.00014EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2026/04/09 4:16 p.m.2 views

CVE-2026-39853

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS7 signature, the code copies the digest value from a parsed...

7.8CVSS6.1AI score0.00014EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/09 3:50 p.m.2 views

CVE-2026-39853

osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS7 signature, the code copies the digest value from a parsed...

7.8CVSS6.2AI score0.00014EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/04/09 3:50 p.m.9 views

CVE-2026-39853

osslsigncode contains a stack buffer overflow in its signature verification paths (PE, MSI, CAB, script) when verifying PKCS#7 signatures. During digest copy from SpcIndirectDataContent into a fixed-size stack buffer (mdbuf[EVP_MAX_MD_SIZE], 64 bytes), the code does not validate the source length...

7.8CVSS6.2AI score0.00014EPSS
Exploits0References3Affected Software1
SUSE CVE
SUSE CVE
added 2025/12/31 12:23 a.m.1 views

SUSE CVE-2025-66863

An issue was discovered in function ddiscriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS6.8AI score0.00139EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2025/12/31 12:23 a.m.1 views

SUSE CVE-2025-66866

An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS6.8AI score0.00023EPSS
Exploits2References3
OSV
OSV
added 2025/12/29 5:15 p.m.2 views

CVE-2025-66866

An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2025/12/29 5:15 p.m.3 views

CVE-2025-66861

An issue was discovered in function dunqualifiedname in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file...

2.5CVSS0.00027EPSS
Exploits1References1
OSV
OSV
added 2025/12/29 5:15 p.m.3 views

CVE-2025-66861

An issue was discovered in function dunqualifiedname in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file...

2.5CVSS6.7AI score
Exploits0References1
OSV
OSV
added 2025/12/29 5:15 p.m.1 views

UBUNTU-CVE-2025-66866

An issue was discovered in function dabitags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS5.8AI score0.00023EPSS
Exploits2References3
UbuntuCve
UbuntuCve
added 2025/12/29 5:15 p.m.1 views

CVE-2025-66863

An issue was discovered in function ddiscriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

7.5CVSS5.9AI score0.00139EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.3 views

PT-2025-53759

Name of the Vulnerable Software and Affected Versions BinUtils version 2.26 Description An issue exists in the d discriminator function within the cp-demangle.c file of BinUtils. This can lead to a denial of service when processing specially crafted PE files. Recommendations Update BinUtils to a...

7.5CVSS6.4AI score0.00139EPSS
Exploits1References8
CVE
CVE
added 2025/12/01 4:34 p.m.7 views

CVE-2025-7007

CVE-2025-7007 describes a NULL pointer dereference in Avast Antivirus running on macOS (version 16.0.0) and Linux (version 3.0.3). The issue occurs when scanning malformed Windows PE files, causing the antivirus process to crash. Multiple connected sources confirm the affected versions and the ro...

7.5CVSS6.5AI score0.00014EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/01 12:0 a.m.2 views

Avast Antivirus 安全漏洞

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus version 16.0.0 MAC and 3.0.3 Linux, which originates from a null pointer dereference caused by scanning malformed Windows PE files, which may result in a process crash...

7.5CVSS6.6AI score0.00014EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-8288

Malware in sbrugna...

7.8CVSS6.9AI score0.00426EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-6610

Malware in sbrugna...

10CVSS6.4AI score0.09863EPSS
Exploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-4995

Malware in sbrugna...

9.3CVSS7.7AI score0.03378EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-10346

Malware in sbrugna...

7.5CVSS7.6AI score0.00593EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-17720

Malware in sbrugna...

7.5CVSS7.5AI score0.00237EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-33321

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00343EPSS
Exploits0References2
Rows per page
Query Builder