Lucene search
+L

1673 matches found

Cvelist
Cvelist
•added 2025/07/22 2:17 p.m.•51 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00212EPSS
SaveExploits0References6
CVE
CVE
•added 2025/07/22 2:17 p.m.•106 views

CVE-2025-4878

CVE-2025-4878 affects libssh. The vulnerability is due to an uninitialized variable in privatekey_from_file() that can be triggered when the filename does not exist, potentially causing signing failures, use-after-free, or memory corruption. Public sources in connected documents confirm this issu...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2025/07/22 2:17 p.m.•14 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.6AI score0.00212EPSS
SaveExploits0References7
Mend
Mend
•added 2025/07/22 2:17 p.m.•4 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS0.00212EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/07/22 2:17 p.m.•9 views

CVE-2025-4878 Libssh: use of uninitialized variable in privatekey_from_file()

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2025/07/22 2:17 p.m.•28 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6AI score0.00212EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/07/22 2:17 p.m.•20 views

CVE-2025-4878

A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekeyfromfile function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption...

3.6CVSS6.1AI score0.00212EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•3 views

CVE-2025-8027: Use of Uninitialized Variable

On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and...

6.5CVSS6.7AI score0.00402EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•24 views

PT-2025-30462

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Graphite VC6 affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this...

7.8CVSS7.6AI score0.00234EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•21 views

PT-2025-30465

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: A remote code execution issue exists due to an uninitialized variable during AR file parsing. Recommendations: At the moment, there is no information about a newer version that...

7.8CVSS7.9AI score0.00218EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2025/07/22 12:00 a.m.•17 views

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.6AI score0.00234EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/07/22 12:00 a.m.•36 views

(0Day) Ashlar-Vellum Graphite VC6 File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Graphite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS6.6AI score0.00234EPSS
SaveExploits0
Snyk
Snyk
•added 2025/07/17 6:42 p.m.•11 views

Use of Uninitialized Variable

Overview Affected versions of this package are vulnerable to Use of Uninitialized Variable via the opjjp2readheader component when reading crafted JPEG images. An attacker can achieve arbitrary heap buffer writes by supplying specially crafted JPEG files. PoC include include static void decodecon...

9.8CVSS7AI score0.00407EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/17 12:00 a.m.•4 views

CVE-2025-53644: Use of Uninitialized Variable

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

9.8CVSS6.1AI score0.00407EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2025/07/17 12:00 a.m.•24 views

Dassault Systèmes eDrawings Viewer JT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.2AI score0.0019EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/07/16 12:00 a.m.•30 views

EPA Honeywell Experion PKS DoS

The vulnerability of the Epic Platform Analyzer EPA component of Honeywell Experion PKS programmable logic controllers is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

7.8CVSS5.4AI score0.00421EPSS
SaveExploits0References3
NVD
NVD
•added 2025/07/15 3:15 p.m.•22 views

CVE-2025-6974

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

7.8CVSS0.0019EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/07/15 3:04 p.m.•12 views

CVE-2025-6974 Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

7.8CVSS8AI score0.0019EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/15 3:04 p.m.•50 views

CVE-2025-6974

SOLIDWORKS eDrawings for SOLIDWORKS Desktop 2025 is affected by CVE-2025-6974 due to an uninitialized variable in the JT file reading procedure. This can allow arbitrary code execution when opening a specially crafted JT file. Root cause: uninitialized memory access during JT file parsing. Affect...

7.8CVSS7.4AI score0.0019EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/07/15 3:04 p.m.•27 views

CVE-2025-6974 Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file...

7.8CVSS0.0019EPSS
SaveExploits0References1
Rows per page
Query Builder