Lucene search
K

39 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/23 12:35 a.m.3 views

CVE-2026-41197

Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism. Noir programs can invoke external functions through foreign calls. When compiling to Brillig bytecode, the SSA...

9.3CVSS5.7AI score0.00019EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/13 1:23 p.m.4 views

CVE-2026-2673

Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. Impact summary: A less preferred key exchange may be used even when a more preferred group is...

5.8AI score0.00023EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2026/02/06 6:15 p.m.4 views

CVE-2026-24851

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.8.5 to v1.11.2 openfga-0.2.22= Helm chart = openfga-0.2.51, v.1.8.5 = docker = v.1.11.2 are vulnerable to improper policy enforcement when certain Check call...

8.8CVSS0.00022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/05 12:0 a.m.4 views

PT-2026-6646

Name of the Vulnerable Software and Affected Versions OpenFGA versions 1.8.5 through 1.11.2 Description OpenFGA is an authorization/permission engine. Versions 1.8.5 through 1.11.2 are susceptible to improper policy enforcement during specific Check calls. This occurs when a model includes a...

9.9CVSS5.4AI score0.00733EPSS
Exploits44References116
Ubuntu
Ubuntu
added 2025/11/10 9:28 p.m.3 views

USN-7869-1: Raptor vulnerabilities

Hanno Böck discovered that Raptor incorrectly handled memory operations when processing certain input files. An attacker could possibly use this issue to cause Raptor to crash, resulting in a denial of service. CVE-2020-25713 Pedro Ribeiro discovered that Raptor incorrectly handled parsing certai...

9.3CVSS6.8AI score0.00471EPSS
Exploits2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-24191

Malicious code in bioql PyPI...

8.8CVSS6.3AI score0.00081EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-55157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during...

8.8CVSS5.9AI score0.00081EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/08/18 9:0 p.m.7 views

OpenFGA Authorization Bypass

Overview OpenFGA v1.9.3 to v1.9.4 openfga-0.2.40 = Helm chart = openfga-0.2.41, v1.9.3 = docker = v.1.9.4 are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. Am I Affected? You are affected by this vulnerability if you are using OpenFGA v1.9.3 to...

9.8CVSS7AI score0.00105EPSS
Exploits0References5Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/13 6:52 p.m.1 views

CVE-2025-55157

A use-after-free vulnerability was found in Vim. This flaw allows an attacker who can trick a user into processing a specially crafted file to trigger the use-after-free, causing the application to crash. Mitigation Do not run untrusted Vim scripts as it's not recommended...

8.8CVSS7AI score0.00081EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2025/08/12 11:23 p.m.1 views

SUSE CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim's internal tuple reference management. Specifically, the tupleunref function may access alread...

5CVSS5.4AI score0.00081EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2025/08/12 11:23 p.m.1 views

SUSE CVE-2025-55158

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in Vim's internal typed value typvalT management. Specifically, the cleartv...

5.6CVSS5.6AI score0.00081EPSS
Exploits0References9
AlpineLinux
AlpineLinux
added 2025/08/11 11:15 p.m.2 views

CVE-2025-55158

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tuples during Vim9 script import operations, an error during evaluation can trigger a double-free in Vim’s internal typed value typvalT management. Specifically, the cleartv...

8.8CVSS7.4AI score0.00081EPSS
Exploits0References3
NVD
NVD
added 2025/08/11 11:15 p.m.1 views

CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

8.8CVSS0.00081EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2025/08/11 11:15 p.m.1 views

CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

8.8CVSS7.2AI score0.00081EPSS
Exploits0References3
OSV
OSV
added 2025/08/11 11:15 p.m.0 views

UBUNTU-CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

8.8CVSS5.7AI score0.00081EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/11 10:54 p.m.1 views

CVE-2025-55157 Vim heap use-after-free vulnerability when processing recursive tuple data types

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

6.9CVSS7.1AI score0.00081EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2025/08/11 10:54 p.m.2 views

CVE-2025-55157

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

8.8CVSS5.5AI score0.00081EPSS
Exploits0
Cvelist
Cvelist
added 2025/08/11 10:54 p.m.3 views

CVE-2025-55157 Vim heap use-after-free vulnerability when processing recursive tuple data types

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

6.9CVSS0.00081EPSS
Exploits0References3
CVE
CVE
added 2025/08/11 10:54 p.m.25 views

CVE-2025-55157

Vim (ed. notated as 9.1.x) is affected by CVE-2025-55157 in versions 9.1.1231 through before 9.1.1400. Root cause: use-after-free in internal tuple reference management (tuple_unref) when evaluating nested Vim script tuples, potentially allowing memory corruption. The exploit requires user intera...

8.8CVSS7.1AI score0.00081EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2025/08/11 10:54 p.m.1 views

CVE-2025-55157 Vim heap use-after-free vulnerability when processing recursive tuple data types

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tuples in Vim script, an error during evaluation can trigger a use-after-free in Vim’s internal tuple reference management. Specifically, the tupleunref function may access alread...

6.9CVSS5.3AI score0.00081EPSS
Exploits0References5
Rows per page
Query Builder