Lucene search
K

6 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-43788

Malicious code in bioql PyPI...

9.2CVSS6.5AI score0.00184EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/31 1:49 p.m.1 views

CVE-2025-54422

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.1 and below, a critical security vulnerability exists in password handling mechanisms. During encrypted sandbox creation, user passwords are transmitted via shared memory,...

6.9CVSS7.3AI score0.00022EPSS
Exploits0References1
OSV
OSV
added 2025/05/22 4:46 p.m.1 views

CVE-2025-46715 Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, ApiGetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to write t...

7.8CVSS6.7AI score0.00084EPSS
Exploits1References3
OSV
OSV
added 2025/05/22 12:27 p.m.1 views

CVE-2025-46714 Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, APIGETSECUREPARAM has an arithmetic overflow leading to a small memory allocation and then a extremely large copy into the small allocation...

7.8CVSS7AI score0.00084EPSS
Exploits1References3
PostrgeSql
PostrgeSql
added 2020/11/12 12:0 a.m.140 views

Vulnerability in core server (CVE-2020-25695)

Multiple features escape "security restricted operation" sandbox An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. While promptly updating PostgreSQL is the best remediation for most users, a...

8.8CVSS7.7AI score0.23757EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/10/15 3:15 p.m.18 views

CVE-2019-10760

safer-eval before 1.3.2 are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code...

9.9CVSS10AI score
Exploits0References1
Rows per page
Query Builder