Lucene search
K

48 matches found

OSV
OSV
added 2026/05/27 2:17 p.m.3 views

UBUNTU-CVE-2026-46045

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: skip reading rdevs that are not insync When reading bitmap pages from member disks, the code iterates through all rdevs and attempts to read from the first available one. However, it only checks for raiddisk...

5.8AI score0.00022EPSS
Exploits0References3
CNVD
CNVD
added 2026/04/02 12:0 a.m.1 views

FreeRDP Heap Buffer Overflow Vulnerability (CNVD-2026-16033)

FreeRDP is an open source Remote Desktop Protocol RDP implementation library and client . FreeRDP suffers from a heap buffer overflow vulnerability. The vulnerability arises due to an out-of-bounds heap memory write due to a bmpSize synchronization error in the persistent cache. An attacker can...

7.1CVSS6.2AI score0.00019EPSS
Exploits0
NVD
NVD
added 2026/03/20 3:15 a.m.1 views

CVE-2026-32889

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS0.00023EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/20 2:23 a.m.23 views

CVE-2026-32889 tinytag: Denial of Service via non-terminating SYLT frame parsing loop

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS0.00023EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/20 2:23 a.m.1 views

CVE-2026-32889 tinytag: Denial of Service via non-terminating SYLT frame parsing loop

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS5.8AI score0.00023EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/20 2:23 a.m.3 views

CVE-2026-32889

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS5.7AI score0.00023EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2026/03/20 2:23 a.m.2 views

CVE-2026-32889 tinytag: Denial of Service via non-terminating SYLT frame parsing loop

tinytag is a Python library for reading audio file metadata. Version 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse...

6.5CVSS5.8AI score0.00023EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2026/03/19 5:25 p.m.7 views

Denial of service via non-terminating SYLT frame parsing loop in tinytag

Summary tinytag 2.2.0 allows an attacker who can supply MP3 files for parsing to trigger a non-terminating loop while the library parses an ID3v2 SYLT synchronized lyrics frame. In server-side deployments that automatically parse attacker-supplied files, a single 498-byte MP3 can cause the parsin...

6.5CVSS5.8AI score0.00023EPSS
Exploits1References6Affected Software1
Packet Storm News
Packet Storm News
added 2026/03/17 12:0 a.m.0 views

Synchronized DNA Sources for Unconditionally Secure Cryptography

Secure communication is the cornerstone of modern infrastructures, yet achieving unconditional security -resistant to any computational attack- remains a fundamental challenge. The One-Time Pad OTP, proven by Shannon to offer perfect secrecy, requires a shared random key as long as the message,...

5.7AI score
Exploits0
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.1 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when accessing synchronized objects during concurrent operations...

6.7CVSS6.8AI score0.00015EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/04 12:11 a.m.5 views

CVE-2025-65841

Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file /Library/Application Support/Aquarius/aquarius.settings using a weak obfuscation scheme. The password is "encrypted" through predictable byte-substitution that can be trivially reversed, allowing immediate...

6.2CVSS6.7AI score0.00045EPSS
Exploits1References1
Packet Storm News
Packet Storm News
added 2025/10/22 12:0 a.m.1 views

Ultra-Fast Wireless Power Hacking

The rapid growth of electric vehicles EVs has driven the development of roadway wireless charging technology, effectively extending EV driving range. However, wireless charging introduces significant cybersecurity challenges. Any receiver within the magnetic field can potentially extract energy,...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2002-1305

Malware in sbrugna...

7.5CVSS6.4AI score0.0385EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/04 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from not fully freeing resources when a memory allocation fails in a synchronized endpoint URB allocation loop,...

5.2AI score0.00016EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/09/15 12:0 a.m.2 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from insufficient atomic context detection and could lead to synchronized decompression under RCU lock...

5.5CVSS5.9AI score0.00032EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/28 12:0 a.m.1 views

Volkswagen MIB3 Infotainment 安全漏洞

Volkswagen MIB3 Infotainment is an infotainment system on a vehicle from Volkswagen Germany. A security vulnerability exists in Volkswagen MIB3 Infotainment that stems from storing synchronized phone contacts in clear text, which could lead to an attacker gaining access to vehicle owner contact...

5.7CVSS6.6AI score0.00089EPSS
Exploits0References4
Packet Storm News
Packet Storm News
added 2025/05/06 12:0 a.m.3 views

A Study on Audio Synchronous Steganography Detection and Distributed Guide Inference Model Based on Sliding Spectral Features and Intelligent Inference Drive

With the rise of short video platforms in global communication, embedding steganographic data in audio synchronization streams has emerged as a new covert communication method. To address the limitations of traditional techniques in detecting synchronized steganography, this paper proposes a...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2024/09/16 12:0 a.m.13 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

0.00148EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/09/16 12:0 a.m.17 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS5.3AI score0.00148EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2024/09/16 12:0 a.m.10 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

6.8AI score0.00148EPSS
Exploits0References5
Rows per page
Query Builder