Lucene search
K

9468 matches found

UbuntuCve
UbuntuCve
added 2025/12/23 9:15 p.m.2 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.5AI score0.00027EPSS
Exploits0References2
OSV
OSV
added 2025/12/23 9:15 p.m.1 views

UBUNTU-CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS6.3AI score0.00027EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2025/12/23 9:15 p.m.2 views

CVE-2025-14933

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.4AI score0.0003EPSS
Exploits0References2
CVE
CVE
added 2025/12/23 9:9 p.m.7 views

CVE-2025-14933

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability (CVE-2025-14933) affects NetCDF-C parsing of NC variables. The flaw stems from insufficient validation of user-supplied data, causing an integer overflow prior to buffer allocation. Successful exploitation can a...

7.8CVSS7.9AI score0.0003EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/23 9:9 p.m.24 views

CVE-2025-14933 NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/23 9:9 p.m.1 views

CVE-2025-14933 NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.4AI score0.0003EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2025/12/23 9:9 p.m.4 views

CVE-2025-14933

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS7.8AI score0.0003EPSS
Exploits0
Cvelist
Cvelist
added 2025/12/23 9:9 p.m.18 views

CVE-2025-14934 NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS0.00027EPSS
Exploits0References1
CVE
CVE
added 2025/12/23 9:9 p.m.7 views

CVE-2025-14934

NSF Unidata NetCDF-C has a stack-based buffer overflow in parsing variable names that leads to remote code execution. The flaw arises from insufficient validation of user-supplied data length before copying to a fixed-length stack buffer. Exploitation requires user interaction (target must visit ...

7.8CVSS7.8AI score0.00027EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2025/12/23 9:9 p.m.3 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00027EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/12/23 9:9 p.m.1 views

CVE-2025-14934 NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.2AI score0.00027EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 4:45 p.m.2 views

CVE-2025-10021

A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions mt before 2026.12. Static object COdaMfcAppApp theApp may access OdString::kEmpty before its initialization. Due to undefined initialization order of static objects across translation units...

7CVSS7.9AI score0.00032EPSS
Exploits0References1
Rockylinux
Rockylinux
added 2025/12/23 9:9 a.m.4 views

httpd security update

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

8.3CVSS6.9AI score0.00145EPSS
Exploits0
EUVD
EUVD
added 2025/12/23 12:30 a.m.2 views

EUVD-2023-60228

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute...

9.8CVSS7.2AI score0.00182EPSS
Exploits2References5
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.4 views

NSF Unidata NetCDF-C 安全漏洞

NSF Unidata NetCDF-C is a tool for processing NetCDF files from NSF Unidata, USA. A security vulnerability exists in NSF Unidata NetCDF-C that stems from a lack of validation of the length of user-supplied data when parsing variable names, which could lead to a stack buffer overflow and remote co...

7.8CVSS8AI score0.00027EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/22 9:35 p.m.2 views

CVE-2023-53966 SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute...

9.8CVSS7.4AI score0.00182EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2025/12/22 4:55 p.m.0 views

httpd: Apache HTTP Server: CGI environment variable override

A configuration override flaw has been discovered in the apache HTTP server. Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration unexpectedly superseding variables calculated by the server...

6.5CVSS5.7AI score0.00145EPSS
Exploits0References5
NVD
NVD
added 2025/12/22 4:15 p.m.2 views

CVE-2025-10021

A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions mt before 2026.12. Static object COdaMfcAppApp theApp may access OdString::kEmpty before its initialization. Due to undefined initialization order of static objects across translation units...

7CVSS0.00032EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/22 3:48 p.m.1 views

CVE-2025-10021

A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions mt before 2026.12. Static object COdaMfcAppApp theApp may access OdString::kEmpty before its initialization. Due to undefined initialization order of static objects across translation units...

7CVSS7.5AI score0.00032EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/22 3:48 p.m.24 views

CVE-2025-10021

A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions mt before 2026.12. Static object COdaMfcAppApp theApp may access OdString::kEmpty before its initialization. Due to undefined initialization order of static objects across translation units...

7CVSS0.00032EPSS
Exploits0References1
Rows per page
Query Builder