Lucene search
+L

3431 matches found

Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.7 views

PT-2026-24139

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A heap-based buffer overflow exists in the UHDR encoder due to truncation of a value, which could allow an out-of-boun...

8.1CVSS6.1AI score0.00401EPSS
SaveExploits0References94
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-28510

Name of the Vulnerable Software and Affected Versions Incus versions prior to 6.23.0 Description Incus, a system container and virtual machine manager, has an issue in its API for retrieving VM screenshots. This API uses a temporary file for QEMU to write the screenshot to, which is then sent to...

7.8CVSS6.1AI score0.0035EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.14 views

PT-2026-8186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue exists in the i2c hid get report function within the Linux kernel's HID i2c subsystem. The i2c hid xfer function reads data into ihid-rawbuf, and the...

7.8CVSS6.7AI score0.00142EPSS
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/12/30 12:23 a.m.13 views

SUSE CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS7AI score0.00115EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/28 12:30 a.m.9 views

EUVD-2025-205487

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS6.5AI score0.00115EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/27 11:15 p.m.9 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

4.7CVSS5.8AI score
SaveExploits0References3
CVE
CVE
added 2025/12/27 10:52 p.m.536 views

CVE-2025-68972

CVE-2025-68972 affects GnuPG/gnupg2 <= 2.4.8, where a signed message ending a plaintext line with the form feed (\f) can allow an adversary to craft a modified message that still passes signature verification, with an “invalid armor” message printed during verification. Connected advisories in...

5.9CVSS6.6AI score0.00115EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/12/27 10:52 p.m.19 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS6.7AI score0.00115EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/27 10:52 p.m.26 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS0.00115EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/12/27 10:52 p.m.24 views

CVE-2025-68972

In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...

5.9CVSS5.3AI score0.00115EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/27 12:00 a.m.9 views

PT-2025-53629

Name of the Vulnerable Software and Affected Versions GnuPG versions through 2.4.8 Description The software is susceptible to a signature verification bypass. If a signed message includes the character 'f' at the end of a plaintext line, an attacker can modify the message to add text after the...

5.9CVSS6.7AI score0.00115EPSS
SaveExploits0References33
SUSE CVE
SUSE CVE
added 2025/12/25 12:54 a.m.7 views

SUSE CVE-2023-54145

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

6.7AI score0.00193EPSS
SaveExploits0References17
EUVD
EUVD
added 2025/12/24 3:30 p.m.7 views

EUVD-2023-60300

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

6.1AI score0.00193EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/24 3:30 p.m.9 views

EUVD-2022-55791

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix memory leak in ocfs2mountvolume There is a memory leak reported by kmemleak: unreferenced object 0xffff88810cc65e60 size 32: comm "mount.ocfs2", pid 23753, jiffies 4302528942 age 34735.105s hex dump first 32 bytes: 10 ...

6AI score0.00248EPSS
SaveExploits0References7
NVD
NVD
added 2025/12/24 1:16 p.m.8 views

CVE-2023-54145

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

0.00193EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/24 1:16 p.m.10 views

UBUNTU-CVE-2023-54145

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

5.9AI score0.00193EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/24 1:06 p.m.5 views

CVE-2023-54145 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

6.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/24 1:06 p.m.32 views

CVE-2023-54145 bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARNONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes as of now, and there are at least two...

0.00193EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/24 1:06 p.m.22 views

CVE-2023-54145

Technical details for CVE-2023-54145 are not publicly available in the provided Connected documents. The EulerOS/Nessus listings reference the CVE, but no affected products, vulnerable components, or fixes are described here. Monitor for vendor advisories for updates.

6.2AI score0.00193EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/24 11:15 a.m.15 views

CVE-2025-68362

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187rxcb The rtl8187rxcb calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received...

0.00208EPSS
SaveExploits0References8
Rows per page
Query Builder