Lucene search
K

20066 matches found

OSV
OSV
added 2025/12/16 2:15 p.m.0 views

UBUNTU-CVE-2025-68212

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmountstring In statmountstring, most flags assign an output offset pointer offp which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNTGIDMAP cases...

5.8AI score0.00026EPSS
Exploits0References11
ATTACKERKB
ATTACKERKB
added 2025/12/16 1:57 p.m.1 views

CVE-2025-68212

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmountstring In statmountstring, most flags assign an output offset pointer offp which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNTGIDMAP cases...

5.2AI score0.00026EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2025/12/16 1:57 p.m.9 views

CVE-2025-68212

The CVE-2025-68212 entry concerns a Linux kernel fix for an uninitialized offp in statmount_string(), where UIDMAP/GIDMAP handling originally assigned fields directly instead of using offp. The patch now assigns offp for UIDMAP and GIDMAP to prevent potential dereferences when *offp is updated, a...

6AI score0.00026EPSS
Exploits0References2
OSV
OSV
added 2025/12/16 1:57 p.m.2 views

CVE-2025-68212 fs: Fix uninitialized 'offp' in statmount_string()

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmountstring In statmountstring, most flags assign an output offset pointer offp which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNTGIDMAP cases...

6.3AI score0.00026EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/16 1:57 p.m.26 views

CVE-2025-68212 fs: Fix uninitialized 'offp' in statmount_string()

In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmountstring In statmountstring, most flags assign an output offset pointer offp which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNTGIDMAP cases...

0.00026EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-68212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: Fix uninitialized 'offp' in statmountstring In statmountstring, most flags assign an output offset pointer offp which is later updated with the string offse...

5.9AI score0.00026EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51625

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's handling of mount string statistics within the statmount string function. Specifically, the offp variable, intended to track the output offset, remain...

9.8CVSS6.5AI score0.00102EPSS
Exploits0References211
OSV
OSV
added 2025/12/15 8:37 p.m.1 views

GO-2025-4173 Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes in github.com/eclipse/paho.mqtt.golang

Eclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes in github.com/eclipse/paho.mqtt.golang...

6.3CVSS6.9AI score0.00042EPSS
Exploits0References5
OSV
OSV
added 2025/12/15 9:55 a.m.2 views

OPENSUSE-SU-2025:20162-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62594: unsigned underflow and division-by-zero can lead to OOB pointer arithmetic and process crash bsc1252749. - CVE-2025-57807: BlobStream Forward-Seek Under-Allocation bsc1249362. - CVE-2025-62171: incomplete fix for integer...

9.8CVSS5.9AI score0.01005EPSS
Exploits6References12
EUVD
EUVD
added 2025/12/13 6:30 p.m.3 views

EUVD-2025-203262

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

6.5CVSS6.4AI score0.00093EPSS
Exploits0References8
OSV
OSV
added 2025/12/13 4:16 p.m.1 views

CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

5.3CVSS6.8AI score
Exploits0References7
OSV
OSV
added 2025/12/13 4:16 p.m.1 views

DEBIAN-CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

5.3CVSS6AI score0.00093EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/13 4:16 p.m.1 views

CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

6.5CVSS6.4AI score0.00093EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2025/12/13 1:2 p.m.4 views

CVE-2025-14607

A vulnerability was detected in OFFIS DCMTK up to 3.6.9. Affected by this issue is the function DcmByteString::makeDicomByteString of the file dcmdata/libsrc/dcbytstr.cc of the component dcmdata. The manipulation results in memory corruption. The attack can be launched remotely. Upgrading to...

6.5CVSS6AI score0.00093EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/13 5:45 a.m.1 views

CVE-2025-67508

gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish and PowerShell, versions 2.11.0 and below of gardenctl allow an attacker with administrative privileges for a Gardener project to craft...

8CVSS6.7AI score0.0003EPSS
Exploits0References1
Mageia
Mageia
added 2025/12/13 4:45 a.m.4 views

Updated golang packages fix security vulnerabilities

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509. CVE-2025-61727 Excessive resource consumption when printing error string for host certificate validation in crypto/x509. CVE-2025-61729...

7.5CVSS7AI score0.00019EPSS
Exploits2References2
OSV
OSV
added 2025/12/13 4:45 a.m.2 views

MGASA-2025-0326 Updated golang packages fix security vulnerabilities

Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509. CVE-2025-61727 Excessive resource consumption when printing error string for host certificate validation in crypto/x509. CVE-2025-61729...

7.5CVSS6.8AI score0.00019EPSS
Exploits2References3
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.3 views

OFFIS DCMTK 缓冲区错误漏洞

OFFIS DCMTK is a collection of libraries and applications that implement most of the DICOM standards from OFFIS Germany. Software for examining, building and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

6.5CVSS6.5AI score0.00093EPSS
Exploits0References8
RedhatCVE
RedhatCVE
added 2025/12/12 10:17 p.m.1 views

CVE-2024-58293

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic...

8.6CVSS7.4AI score0.00055EPSS
Exploits0References1
OSV
OSV
added 2025/12/12 12:20 p.m.2 views

OESA-2025-2834 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

6.1CVSS6.7AI score0.00018EPSS
Exploits0References2
Rows per page
Query Builder