Lucene search
K

79832 matches found

Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•8 views

PT-2026-47957

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally...

7.8CVSS7.2AI score0.00298EPSS
Exploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•10 views

PT-2026-47837

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur in a CMP client application when processing a crafted CMP response. An attacker controlling a CMP server or acting as a man-in-the-middle can send a CRMF...

9.1CVSS5.5AI score0.01388EPSS
Exploits0References79
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•18 views

PT-2026-47834

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...

9.1CVSS5.5AI score0.01388EPSS
Exploits0References77
OSV
OSV
•added 2026/06/09 12:0 a.m.•3 views

UBUNTU-CVE-2026-42767

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...

5.9CVSS5.4AI score0.00344EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/06/09 12:0 a.m.•17 views

OpenSSL 1.0.2 < 1.0.2zq Multiple Vulnerabilities

The version of OpenSSL installed on the remote host is prior to 1.0.2zq. It is, therefore, affected by multiple vulnerabilities as referenced in the 1.0.2zq advisory. - Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption...

8.8CVSS6.9AI score0.01388EPSS
Exploits0References12
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•8 views

PT-2026-47835

Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. Impact summary: A NULL pointer dereference can...

5.6AI score0.00408EPSS
Exploits0References4
Cvelist
Cvelist
•added 2026/06/09 12:0 a.m.•33 views

CVE-2025-55659

A NULL pointer dereference in the cttsboxwrite function isomedia/boxcodebase.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

0.00392EPSS
Exploits1References1
Cvelist
Cvelist
•added 2026/06/09 12:0 a.m.•32 views

CVE-2025-55651

A NULL pointer dereference in the gfisomgetuserdatacount function isomedia/isomread.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

0.00138EPSS
Exploits1References1
Cvelist
Cvelist
•added 2026/06/09 12:0 a.m.•31 views

CVE-2025-55657

A NULL pointer dereference in the gfodfvvccfgwritebs function odf/descriptors.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

0.00521EPSS
Exploits1References1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•7 views

PT-2026-48141

InDesign Desktop versions 21.3, 20.5.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this...

5.5CVSS5.5AI score0.0013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•9 views

PT-2026-48162

🚨 CVE-2025-55659 A NULL pointer dereference in the ctts box write function isomedia/box code base.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file. šŸŽ–@cveNotify...

6.5CVSS5.3AI score0.00392EPSS
Exploits1References4
Vulnrichment
Vulnrichment
•added 2026/06/09 12:0 a.m.•7 views

CVE-2025-55657

A NULL pointer dereference in the gfodfvvccfgwritebs function odf/descriptors.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5AI score0.00521EPSS
Exploits1References1
Vulnrichment
Vulnrichment
•added 2026/06/09 12:0 a.m.•6 views

CVE-2025-55659

A NULL pointer dereference in the cttsboxwrite function isomedia/boxcodebase.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5AI score0.00392EPSS
Exploits1References1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•7 views

PT-2026-48225

Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS6.1AI score0.00161EPSS
Exploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•8 views

PT-2026-48324

Spring Data REST's JSON Patch application/json-patch+json implementation does not apply the write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. Affected versions: Spring Data REST 3.7.0 through 3.7.19; 4.3.0 through 4.3.16; 4.4.0 through 4.4.14; 4.5.0...

7.5CVSS5.4AI score0.00202EPSS
Exploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•12 views

PT-2026-48302

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An authorized user can cause a server crash by executing a query using a 2dsphere index on a field containing a GeoJSON GeometryCollection. The issue occurs when...

7.1CVSS5.5AI score0.00235EPSS
Exploits0References3
Vulnrichment
Vulnrichment
•added 2026/06/09 12:0 a.m.•5 views

CVE-2025-55651

A NULL pointer dereference in the gfisomgetuserdatacount function isomedia/isomread.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5AI score0.00138EPSS
Exploits1References1
CVE
CVE
•added 2026/06/09 12:0 a.m.•9 views

CVE-2025-55659

CVE-2025-55659 describes a NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4. The underlying issue in the MP4 container code allows an attacker to trigger a denial-of-service by feeding a crafted MP4 file. The available sources confirm the vuln...

6.5CVSS5.5AI score0.00392EPSS
Exploits1References2Affected Software1
CVE
CVE
•added 2026/06/09 12:0 a.m.•8 views

CVE-2025-55651

CVE-2025-55651 describes a NULL pointer dereference in GPAC MP4Box v2.4, within gf_isom_get_user_data_count (isomedia/isom_read.c). The vulnerability can cause a Denial of Service when processing a crafted MP4 file. The connected sources confirm a PoC exists, but no specific patch/version or reme...

5.5CVSS5.5AI score0.00138EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/09 12:0 a.m.•11 views

PT-2026-48159

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A NULL pointer dereference occurs in the gf isom get user data count function within the isomedia/isom read.c file. This issue allows attackers to cause a Denial of Service DoS, which is a condition where a...

5.5CVSS5.2AI score0.00138EPSS
Exploits1References6
Rows per page
Query Builder