Lucene search
+L

83608 matches found

Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.29 views

PT-2026-47882

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A null pointer dereference in Windows Kerberos allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

6.5CVSS5.4AI score0.00903EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.18 views

MongoDB Server 代码问题漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. Version 8.0 of MongoDB Server contains a code vulnerability. This vulnerability...

7.1CVSS5.3AI score0.00307EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.21 views

GPAC MP4Box 代码问题漏洞

GPAC MP4Box is a open-source multimedia packager from GPAC. It is primarily used for processing ISOBMF files such as MP4 and 3GP, but it can also be used for importing/exporting media from container files like AVI, MPG, MKV, and MPEG-2 TS. Version 2.4 of GPAC MP4Box has a code vulnerability cause...

6.5CVSS5.3AI score0.00345EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.24 views

GPAC MP4Box 代码问题漏洞

GPAC MP4Box is a open-source multimedia packager from GPAC. It is primarily used for processing ISOBMF files such as MP4 and 3GP, but it can also be used for importing/exporting media from container files like AVI, MPG, MKV, and MPEG-2 TS. Version 2.4 of GPAC MP4Box has a code vulnerability cause...

7.5CVSS5.3AI score0.00467EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.16 views

GPAC MP4Box 安全漏洞

GPAC MP4Box is a open-source multimedia packager from GPAC. It is primarily used for processing ISOBMF files such as MP4 and 3GP, but it can also be used for importing/exporting media from container files like AVI, MPG, MKV, and MPEG-2 TS. Version 2.4 of GPAC MP4Box has a security vulnerability...

5.5CVSS5.3AI score0.00192EPSS
SaveExploits1References1
OSV
OSV
added 2026/06/09 12:0 a.m.9 views

UBUNTU-CVE-2026-42767

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...

5.9CVSS5.4AI score0.00557EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/09 12:0 a.m.8 views

CVE-2025-55659

A NULL pointer dereference in the cttsboxwrite function isomedia/boxcodebase.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

6.5CVSS5.9AI score
SaveExploits0References4
OSV
OSV
added 2026/06/09 12:0 a.m.9 views

UBUNTU-CVE-2026-42764

Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server process and a Denial ...

7.5CVSS5.4AI score0.01165EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.19 views

OpenSSL 异常处理不当漏洞

OpenSSL is an open-source encryption library developed by the OpenSSL team that enables secure implementation of Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. This product supports various encryption algorithms, including symmetric ciphers, hash algorithms, and secure...

7.5CVSS5.9AI score0.01165EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/09 12:0 a.m.39 views

CVE-2025-55651

CVE-2025-55651 describes a NULL pointer dereference in GPAC MP4Box v2.4, within gf_isom_get_user_data_count (isomedia/isom_read.c). The vulnerability can cause a Denial of Service when processing a crafted MP4 file. The connected sources confirm a PoC exists, but no specific patch/version or reme...

5.5CVSS5.5AI score0.00192EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/06/09 12:0 a.m.9 views

CVE-2025-55651

A NULL pointer dereference in the gfisomgetuserdatacount function isomedia/isomread.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5CVSS5.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/06/09 12:0 a.m.13 views

CVE-2025-55651

A NULL pointer dereference in the gfisomgetuserdatacount function isomedia/isomread.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

5.5CVSS5.5AI score0.00192EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.23 views

PT-2026-47837

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur in a CMP client application when processing a crafted CMP response. An attacker controlling a CMP server or acting as a man-in-the-middle can send a CRMF...

9.1CVSS5.5AI score0.01165EPSS
SaveExploits0References125
Positive Technologies
Positive Technologies
added 2026/06/09 12:0 a.m.29 views

PT-2026-47834

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...

7.5CVSS5.5AI score0.01165EPSS
SaveExploits0References104
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.42 views

Security Updates for Microsoft Word Products (June 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-45456, CVE-2026-45458 - Untrust...

8.4CVSS7.2AI score0.00455EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.16 views

Adobe Dreamweaver 21.0 < 21.8 Multiple Vulnerabilities (APSB26-62) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 21.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-62 advisory. - Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized Pointer vulnerability th...

8.6CVSS6.5AI score0.00177EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/06/08 8:9 p.m.15 views

CVE-2026-46278

A flaw was found in the Linux kernel's drm/imagination driver. A local user could trigger a kernel NULL pointer dereference by providing invalid data when updating the ftrace mask through a debugfs entry. This vulnerability can lead to a system crash, resulting in a Denial of Service DoS...

5.5CVSS5.4AI score0.00107EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/08 8:7 p.m.18 views

Security Bulletin: IBM i is Affected By NULL Pointer Dereference, Use Afer Free, and Out-of-Bounds Write Vulnerabilities in OpenSSL [CVE-2026-28388, CVE-2026-28389, CVE-2026-28390, CVE-2026-28387, CVE-2026-31789]

Summary OpenSSL for IBM i is vulnerable to NULL pointer derefences when processing either a delta CRL indicator extension CVE-2026-28388 or CMS EnvelopedData message with KeyAgreeRecipientInfo CVE-2026-28389, CVE-2026-28390, and use after free when using DANE TLSA-based server authentication...

9.8CVSS8.7AI score0.01059EPSS
SaveExploits0Affected Software5
RedhatCVE
RedhatCVE
added 2026/06/08 7:57 p.m.14 views

CVE-2026-46282

A flaw was found in the Linux kernel's iio: frequency: admv1013 driver. This vulnerability occurs when the system attempts to read a device property, and an uninitialized string is used, leading to a NULL pointer dereference. This could allow a local attacker to trigger a system crash, resulting ...

5.5CVSS5.4AI score0.00122EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/08 7:26 p.m.13 views

CVE-2026-46292

A flaw was found in the Linux kernel's generic power domain genpd component. When a virtual device is detached from a power management PM domain, the pmruntimedisable function is not called, leaving runtime PM enabled for the detached device. This oversight can lead to critical errors, including ...

5.5CVSS5.5AI score0.00123EPSS
SaveExploits0References4
Rows per page
Query Builder