Lucene search
+L

3474 matches found

OSV
OSV
•added 2025/12/16 10:15 p.m.•11 views

DEBIAN-CVE-2025-52582

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability...

7.5CVSS5.4AI score0.00414EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/16 10:15 p.m.•16 views

UBUNTU-CVE-2025-52582

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits1References3
CVE
CVE
•added 2025/12/16 9:32 p.m.•66 views

CVE-2025-52582

CVE-2025-52582 describes an out-of-bounds read vulnerability in the Grassroot DICOM 3.024 package, specifically in the function Overlay::GrabOverlayFromPixelData . A specially crafted DICOM file can cause an information leak. The available connected documents identify the affected component and t...

7.5CVSS6AI score0.00414EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2025/12/16 9:32 p.m.•18 views

CVE-2025-52582

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability...

7.5CVSS6AI score0.00414EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•13 views

PT-2025-51786

An out-of-bounds read vulnerability exists in the Overlay::GrabOverlayFromPixelData functionality of Grassroot DICOM 3.024. A specially crafted DICOM file can lead to an information leak. An attacker can provide a malicious file to trigger this vulnerability...

7.4CVSS6.7AI score0.00414EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2025/12/15 1:30 p.m.•16 views

WordPress Pixel Manager for WooCommerce plugin <= 1.51.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Bao - BlueRock in WordPress Plugin Pixel Manager for WooCommerce versions = 1.51.1...

5.3CVSS7AI score0.00336EPSS
SaveExploits0Affected Software1
Snyk
Snyk
•added 2025/12/12 10:07 p.m.•6 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the parsing process of DICOM files containing encapsulated PixelData fragments. An attacker can cause a segmentation fault and an application crash by supplying a crafted malicious DICOM file. Remediation Upgrade...

6.8CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/12/12 10:07 p.m.•8 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the parsing process of DICOM files containing encapsulated PixelData fragments. An attacker can cause a segmentation fault and an application crash by supplying a crafted malicious DICOM file. Remediation Upgrade...

6.8CVSS6.7AI score0.00146EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/12 3:20 a.m.•24 views

CVE-2025-14062

CVE-2025-14062 – Animated Pixel Marquee Creator (WordPress) is a CSRF vulnerability in all versions up to 1.0.0 caused by missing nonce validation on the marquee deletion function. This enables unauthenticated attackers to delete marquees via forged requests if the site administrator is fooled in...

4.3CVSS5.7AI score0.00151EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•14 views

WordPress plugin Animated Pixel Marquee Creator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.3AI score0.00151EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•0 views

CVE-2025-14062: Cross-Site Request Forgery (CSRF)

The Animated Pixel Marquee Creator plugin for WordPress is vulnerable to Cross-Site Request Forgery via the 'marquee' parameter in all versions up to, and including, 1.0.0. This is due to missing nonce validation on the marquee deletion function. This makes it possible for unauthenticated attacke...

4.3CVSS5.7AI score0.00151EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/11 8:56 p.m.•14 views

WordPress Animated Pixel Marquee Creator plugin <= 1.0.0 - Cross-Site Request Forgery via 'marquee' Parameter vulnerability

Cross-Site Request Forgery via 'marquee' Parameter vulnerability discovered by ChamlaVic in WordPress Plugin Animated Pixel Marquee Creator versions = 1.0.0...

4.3CVSS6.8AI score0.00151EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•14 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from memory corruption due to uninitialized data, which could lead to local elevation of privilege...

7.8CVSS6.4AI score0.00078EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•14 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in WAVESsenddatatodsp in libaocwaves.c, which could lead to local elevation of privilege...

7.8CVSS5.9AI score0.00078EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•13 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from an out-of-bounds write due to incorrect boundary checking, which could lead to remote code execution...

9.8CVSS8AI score0.00271EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•12 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a competing condition in PrepareWorkloadBuffers in gxpmainactor.cc, which could lead to local elevation of privilege...

7CVSS6AI score0.00059EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•19 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a boundary check error in ssDecodeLcsAssistDataReqMsg in ssLcsManagement.c, which could lead to remote elevation of privilege...

8CVSS6.4AI score0.00123EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•17 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the lack of boundary checking in GetHostAddress in gxpbuffer.h, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•13 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from improper validation of the aocservicereadmessage input in aocipccore.c, which could lead to local elevation of privilege...

7.8CVSS6.2AI score0.00103EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/11 12:00 a.m.•18 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a bounds-checking error in SwDcpItg in upL2commonPdcpSecurity.cpp, which could lead to a remote denial of service...

6.5CVSS6.4AI score0.00302EPSS
SaveExploits0References1
Rows per page
Query Builder