Lucene search
+L

9934 matches found

NVD
NVD
added 2025/10/03 12:15 p.m.8 views

CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

9.8CVSS0.00574EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/03 11:35 a.m.44 views

CVE-2025-10547

CVE-2025-10547 affects DrayTek Vigor Routers running DrayOS. An uninitialized variable in the HTTP CGI request arguments processing component can cause memory corruption, enabling remote code execution (RCE). Impact, per sources, includes unauthenticated attacker access via LAN or WAN (if EasyVPN...

9.8CVSS6.5AI score0.00574EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/03 11:35 a.m.4 views

CVE-2025-10547 CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

6.5AI score0.00574EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/10/02 10:7 a.m.9 views

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

5.5CVSS6.8AI score0.00166EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/10/01 11:25 p.m.8 views

SUSE CVE-2025-9232

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

6.5CVSS7AI score0.02251EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2025/10/01 11:25 p.m.5 views

SUSE CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

5.3CVSS9.3AI score0.00181EPSS
SaveExploits0References4
OSV
OSV
added 2025/10/01 9:30 a.m.11 views

GHSA-25QH-J22F-PWP8 QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

5.9CVSS7.4AI score0.00181EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2025/10/01 9:30 a.m.33 views

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

7CVSS7.7AI score0.00181EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2025/10/01 8:15 a.m.8 views

DEBIAN-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/01 8:15 a.m.8 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS0.00181EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/01 8:15 a.m.5 views

UBUNTU-CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2025/10/01 8:15 a.m.4 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.3AI score0.00181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/01 7:26 a.m.16 views

CVE-2025-11226 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS0.00181EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/01 7:26 a.m.71 views

CVE-2025-11226

CVE-2025-11226 is an ACE vulnerability in logback-core’s conditional configuration file processing. The attackable path is present in Java applications using logback-core versions up to 1.5.18 (some sources reference up to 1.5.34); exploitation can enable arbitrary code execution by compromising ...

7CVSS7.4AI score0.00181EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/10/01 7:26 a.m.5 views

CVE-2025-11226

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS6.1AI score0.00181EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/10/01 7:26 a.m.14 views

CVE-2025-11226 Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program...

7CVSS7.4AI score0.00181EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.9 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a contention condition in the lastcmd variable that could lead to post-release reuse or double release...

6.1AI score0.00106EPSS
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2025/10/01 12:0 a.m.19 views

QOS.CH logback-core is vulnerable to Arbitrary Code Execution through file processing

QOS.CH logback-core versions up to 1.5.18 contain an ACE vulnerability in conditional configuration file processing in Java applications. This vulnerability allows an attacker to execute arbitrary code by compromising an existing logback configuration file or by injecting a malicious environment...

7CVSS7.3AI score0.00181EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/30 1:17 p.m.8 views

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

5.9CVSS7AI score
SaveExploits0References15
Vulnrichment
Vulnrichment
added 2025/09/30 1:17 p.m.3 views

CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...

6.7AI score0.02251EPSS
SaveExploits0References6
Rows per page
Query Builder