Lucene search
K

33 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:35 a.m.5 views

CVE-2019-7617

When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing...

7.2CVSS6.8AI score0.00211EPSS
Exploits0References1
NVD
NVD
added 2025/12/23 9:15 p.m.1 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 9:15 p.m.2 views

DEBIAN-CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 9:15 p.m.4 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS6.3AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/12/23 9:15 p.m.2 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.5AI score0.00027EPSS
Exploits0References2
OSV
OSV
added 2025/12/23 9:15 p.m.1 views

UBUNTU-CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS6.3AI score0.00027EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/23 9:9 p.m.18 views

CVE-2025-14934 NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/12/23 9:9 p.m.7 views

CVE-2025-14934

NSF Unidata NetCDF-C has a stack-based buffer overflow in parsing variable names that leads to remote code execution. The flaw arises from insufficient validation of user-supplied data length before copying to a fixed-length stack buffer. Exploitation requires user interaction (target must visit ...

7.8CVSS7.8AI score0.00027EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/12/23 9:9 p.m.3 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00027EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/12/23 9:9 p.m.1 views

CVE-2025-14934 NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.2AI score0.00027EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.4 views

NSF Unidata NetCDF-C 安全漏洞

NSF Unidata NetCDF-C is a tool for processing NetCDF files from NSF Unidata, USA. A security vulnerability exists in NSF Unidata NetCDF-C that stems from a lack of validation of the length of user-supplied data when parsing variable names, which could lead to a stack buffer overflow and remote co...

7.8CVSS8AI score0.00027EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/12/18 12:0 a.m.3 views

(0Day) NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

7.8CVSS7.2AI score0.00027EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.2 views

PT-2025-52391

Name of the Vulnerable Software and Affected Versions NSF Unidata NetCDF-C affected versions not specified Description A flaw exists in the parsing of variable names, stemming from insufficient validation of user-supplied data length before copying it into a fixed-length stack-based buffer. This...

7.8CVSS7.8AI score0.00027EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-8112

Malware in sbrugna...

6.8CVSS6.6AI score0.00219EPSS
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in variable-name (npm)

The package variable-name was found to contain malicious code...

7AI score
Exploits0
vulnersOsv
vulnersOsv
added 2025/08/14 6:52 p.m.2 views

@mattdesl/quick-stub (>=1.0.0 <=3.0.1), brick (=0.0.0) +15 more potentially affected by unknown CVE via variable-name (>=0.0.1 <=0.0.2)

variable-name NPM version =0.0.1, =1.0.0, =0.0.0, =0.0.0, =0.0.0, =0.1.0, =0.0.0, =1.0.0, =0.0.0, =1.2.0, =7.0.0, =1.0.0, =0.0.0, =1.1.1, =1.0.0, =1.9.0 and more Source cves: unknown CVE Source advisory: OSV:MAL-2025-38145...

5.8AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-38145 Malicious code in variable-name (npm)

The package variable-name was found to contain malicious code...

7.2AI score
Exploits0
Vulnrichment
Vulnrichment
added 2025/05/15 12:0 a.m.5 views

CVE-2024-52877

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...

7AI score0.00292EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/05/24 4:54 p.m.16 views

Elastic APM agent for Python client CGI proxy redirection flaw

When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attacker redirecting collected APM data to a proxy of their choosing...

7.2CVSS6.7AI score0.00211EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2020/02/06 3:15 p.m.12 views

Buffer overflow

Buffer overflow in the Reclaim function in Tianocore EDK2 before SVN 16280 allows physically proximate attackers to gain privileges via a long variable name...

4.6CVSS7.5AI score0.00219EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder