Lucene search
+L

189 matches found

Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.6 views

PT-2025-33758

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the platform/x86/intel/pmt component of the Linux kernel related to a NULL pointer dereference when using intel pmt read for binary sysfs. This occurs when a pcidev is...

8.5CVSS6.1AI score0.08942EPSS
SaveExploits4References613
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.7 views

SAP MDM Server 安全漏洞

SAP MDM Server is an MDM server from SAP, Germany. A security vulnerability exists in SAP MDM Server that stems from a memory read access violation triggered by the Read function when processing specially crafted packets, which could lead to an unexpected termination of the server process...

7.5CVSS6.4AI score0.00361EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 3:24 a.m.13 views

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

7.8CVSS8.2AI score0.00073EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/12 12:6 a.m.31 views

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

4.5CVSS4.9AI score0.00273EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.37 views

QuickJS 安全漏洞

QuickJS is a small and embeddable Javascript engine open-sourced by QuickJS. A security vulnerability exists in QuickJS 0.9.0 and earlier versions, which stems from a lack of length checking in JSReadString, and may result in a heap buffer overflow...

5.6CVSS5.9AI score0.00282EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2025/04/03 1:36 p.m.14 views

CVE-2025-32050

A flaw was found in libsoup. The libsoup appendparamquoted function may contain an overflow bug resulting in a buffer under-read...

5.9CVSS7.1AI score0.0072EPSS
SaveExploits0
NVD
NVD
added 2025/02/26 3:15 p.m.12 views

CVE-2025-25799

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php...

6CVSS0.00237EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/02/17 2:31 a.m.11 views

CVE-2025-1371 GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference

A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handledynamicsymtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has...

4.8CVSS4AI score0.00227EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:0 a.m.12 views

The vulnerability of the ppp_read() and ppp_write() functions (drivers/net/ppp/ppp_generic.c) in the Linux operating system’s PPP kernel driver allows a hacker to cause a service failure.

The vulnerability of the pppread and pppwrite functions drivers/net/ppp/pppgeneric.c in the Linux kernel-based PPP driver is related to insufficient input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.1CVSS6.6AI score0.00287EPSS
SaveExploits0References52Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:0 a.m.8 views

The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMDGPU cores of the Linux operating system is related to incorrect blocking of resources in the amdgpudebugfsmqdread function. Exploiting this vulnerability can allow a hacker to cause service failures...

5.5CVSS6.7AI score0.00172EPSS
SaveExploits0References18Affected Software4
Vulnrichment
Vulnrichment
added 2024/11/15 9:46 p.m.10 views

CVE-2017-13311

In the read function of ProcessStats.java, there is a possible read/write serialization issue leading to a permissions bypass. This could lead to local escalation of privilege where an app can start an activity with system privileges with no additional execution privileges needed. User interactio...

7.1AI score0.00073EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:0 a.m.18 views

The vulnerability of the NFS kernel component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NFS kernel component in Linux operating systems is related to incorrect blocking in the nfsnetfsissueread function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.002EPSS
SaveExploits0References21Affected Software4
OSV
OSV
added 2024/11/01 11:9 a.m.6 views

OESA-2024-2312 openresty-openssl111 security update

Security Fixes: The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" e.g. "CERTIFICATE", any header data and the payload data. If the function succeeds then the "nameout", "header" and "data" arguments are populated with pointers to buffers containing the releva...

7.5CVSS7.3AI score0.20444EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/06 11:51 a.m.6 views

Malicious code in instaread (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 792748013463fb0303ff6033b47dcb48c23dc944d5075a8859b6997eafd47a56 The file bc2556d1c1ea2a2d00.js contains an AdWare LNKR, this file is included in readarticle.html template and effectively used when the user requests to see t...

7AI score
SaveExploits0References2
OSV
OSV
added 2024/09/27 7:15 a.m.7 views

UBUNTU-CVE-2024-9029

A flaw was found in the freeimage library. Processing a crafted image can cause a buffer over-read of 1 byte in the readiptcprofile function in the Source/Metadata/IPTC.cpp file because the size of the profile is not being sanitized, causing a crash in the application linked to the library,...

7.5CVSS5.9AI score0.00514EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.8 views

PT-2024-24958 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the circ read function of link device memory legacy.c due to an incorrect bounds check. This...

9.8CVSS7.5AI score0.00325EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/05/10 12:0 a.m.6 views

HDF Group HDF5 安全漏洞

HDF Group HDF5 is a suite of tools for managing and storing different types of data from the American company HDF Group. The product supports managing, manipulating, viewing and analyzing data and generating files in portable formats. A security vulnerability exists in HDF5 Library version 1.14.3...

9.8CVSS8.1AI score0.00927EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/09 12:0 a.m.6 views

PT-2024-6196 · Unknown +2 · Hdf5 Library +2

Name of the Vulnerable Software and Affected Versions: HDF5 Library versions 1.14.3 and earlier Description: The issue is related to a heap-based buffer overflow in the H5HG read function in H5HG.c, which is called from H5VL native blob get in H5VLnative blob.c. This results in the corruption of...

9.8CVSS8AI score0.00927EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2024/04/18 12:0 a.m.7 views

PT-2024-40699 · Matio · Matio

Name of the Vulnerable Software and Affected Versions: Matio affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

6.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/23 12:0 a.m.13 views

PT-2024-18164

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue allows for arbitrary file read via the paddle.vision.ops.read file function. Recommendations For paddlepaddle/paddle version 2.6.0, consider restricting access to the read file function...

8.2CVSS7.2AI score0.00564EPSS
SaveExploits1References12
Rows per page
Query Builder