Lucene search
+L

57 matches found

Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•6 views

PT-2026-104826

A malicious X server could exploit a buffer overflow in libX11 before 1.8.14 during handling of XkbGetMap overflowing the key sym map...

7.5CVSS6.2AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/21 12:00 a.m.•4 views

PT-2026-96101

Name of the Vulnerable Software and Affected Versions libX11 versions prior to 1.8.14 Description A buffer overflow exists in the handling of XkbGetMap, which can lead to an overflow of the key sym map. This issue allows a malicious X server to exploit the flaw. Recommendations Update libX11 to...

7.5CVSS6AI score0.00199EPSS
SaveExploits0References33
OSV
OSV
•added 2026/05/22 1:11 p.m.•17 views

CLSA-2025-1754649018 Fix CVE(s): CVE-2025-1176

SECURITY UPDATE: heap-based Buffer Overflow in ELF ld Component - debian/patches/CVE-2025-1176.patch: prevent illegal memory access when indexing into the symhashes array of the elf bfd cookie structure - CVE-2025-1176...

5.1CVSS6.4AI score0.00678EPSS
SaveExploits1References1
NVD
NVD
•added 2026/05/15 3:16 p.m.•63 views

CVE-2025-14972

Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. KSU keys using SYMCRYPTO will be impacted by this vulnerability...

4.1CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/15 2:35 p.m.•34 views

CVE-2025-14972

CVE-2025-14972 affects the SYMCRYPTO engine on SixG301xxx devices, where DPA countermeasures are not sufficiently random, leading to eventual repetition. The vulnerability could impact KSU keys using SYMCRYPTO. The CVSS in the provided data indicates physical attack vector with high complexity an...

4.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/09 3:26 p.m.•19 views

CLSA-2025-1760023587 Fix CVE(s): CVE-2025-1176

SECURITY UPDATE: heap-based buffer overflow in function bfdelfgcmarkrsec - debian/patches/CVE-2025-1176.patch: prevent illegal memory access when indexing into the symhashes array of the elf bfd cookie structure - CVE-2025-1176...

5.1CVSS6.6AI score0.00678EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/30 4:15 p.m.•16 views

CVE-2025-6034

There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open...

8.5CVSS6AI score0.00179EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/30 4:07 p.m.•11 views

CVE-2025-6034 Out of Bounds Read in DefaultFontOptions() in NI Circuit Design Suite

There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open...

8.5CVSS7AI score0.00179EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/30 12:00 a.m.•4 views

CVE-2025-6034: Out-of-bounds Read

There is a memory corruption vulnerability due to an out of bounds read in DefaultFontOptions when using SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open...

8.5CVSS6.5AI score0.00179EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/08 2:41 p.m.•11 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/08 2:41 p.m.•9 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/08 2:41 p.m.•12 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/08 2:41 p.m.•13 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

8.8CVSS8.9AI score0.02347EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/08 2:15 p.m.•28 views

CVE-2025-36855

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

8.8CVSS0.00771EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-34322 Malicious code in sym-responsive (npm)

The package sym-responsive was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in sym-responsive (npm)

The package sym-responsive was found to contain malicious code...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•3 views

CVE-2025-30420: Out-of-bounds Read

There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user t...

8.5CVSS6.5AI score0.00197EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•4 views

CVE-2025-30417: Out-of-bounds Write

There is a memory corruption vulnerability due to an out of bounds write in Library!DecodeBase64 when using the SymbolEditor in NI Circuit Design Suite. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user...

8.5CVSS6.5AI score0.00197EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/27 12:00 a.m.•16 views

The vulnerability of the SYM_CODE_START() function in the arch/x86/entry/entry_32.S module of the Linux operating system allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the SYMCODESTART function in the arch/x86/entry/entry32.S module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of protected informati...

7.1CVSS7.2AI score0.00215EPSS
SaveExploits0References17Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/03/27 12:00 a.m.•17 views

The vulnerabilities of the riscv/purgatory components of the Linux operating system’s kernel allow a hacker to trigger a service failure.

The vulnerability of the SYMCODEEND function in riscv/purgatory components of the Linux operating system’s kernel is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS6.4AI score0.00222EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder