Lucene search
+L

134 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:56 p.m.16 views

CVE-2022-32925

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to cause unexpected system termination or write kernel memory...

7.1CVSS5.9AI score0.00262EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:43 p.m.12 views

CVE-2022-34271

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0...

8.8CVSS6.6AI score0.01384EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:51 p.m.14 views

CVE-2020-11253

Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

7.8CVSS7.3AI score0.00167EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:47 a.m.21 views

CVE-2019-10495

Arbitrary buffer write issue while processing sequence header during HEVC or AVC encoding. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W, MSM8996AU,...

7.3CVSS7.7AI score0.00195EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:24 a.m.15 views

CVE-2018-9475

In HeadsetInterface::ClccResponse of btifhf.cc, there is a possible out of bounds stack write due to a missing bounds check. This could lead to remote escalation of privilege via Bluetooth, if the recipient has enabled SIP calls with no additional execution privileges needed. User interaction is...

8.8CVSS7.9AI score0.00154EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/08 12:00 a.m.107 views

CVE-2025-44021

OpenStack Ironic prior to 29.0.1 is vulnerable to a local-file write during image handling when a deployment is performed via the API. A malicious project assigned as a node owner can supply a path to a local file (readable by ironic-conductor), which may then be written to the target node’s disk...

2.8CVSS3.8AI score0.00182EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/05/08 12:00 a.m.46 views

CVE-2025-44021

OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling if a deployment was performed via the API. A malicious project assigned as a node owner can provide a path to any local file readable by ironic-conductor, which may then be written to the target...

2.8CVSS0.00182EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/02 4:15 p.m.12 views

CVE-2023-53081

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...

7.8CVSS0.00204EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/05/02 3:55 p.m.21 views

CVE-2023-53081 ocfs2: fix data corruption after failed write

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2writeendnolock just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page...

0.00204EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/04/07 12:00 a.m.9 views

PT-2025-28134 · Git +1 · Liblouis

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from an unknown write issue discovered through OSS-Fuzz. The crash state indicates involvement of the lou handlePassVariableAction...

7AI score
SaveExploits0References2
Cvelist
Cvelist
added 2025/03/20 9:07 p.m.26 views

CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code...

2.1CVSS0.00157EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/19 9:15 p.m.17 views

CVE-2025-27774

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in modeldownload.py line 156 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the...

9.3CVSS0.0058EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/03/19 8:42 p.m.23 views

CVE-2025-27776 Applio allows SSRF and file write in model_download.py

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF and file write in modeldownload.py line 240 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the...

9.3CVSS7.5AI score0.0058EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/19 8:42 p.m.13 views

CVE-2025-27777 Applio allows SSRF and file write in model_download.py

Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF in modeldownload.py line 195 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself ...

8.7CVSS6.6AI score0.00418EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/03/19 8:41 p.m.39 views

CVE-2025-27782 Applio allows arbitrary file write in inference.py

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of...

8.7CVSS0.0142EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/03/19 12:00 a.m.12 views

PT-2025-11977 · Applio · Applio

Name of the Vulnerable Software and Affected Versions: Applio versions 3.2.7 and prior Description: Applio is a voice conversion tool vulnerable to server-side request forgery SSRF and file write within the model download.py file line 143 in version 3.2.7. The SSRF allows sending requests on beha...

9.3CVSS7.3AI score0.00585EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:00 a.m.19 views

Linux Distros Unpatched Vulnerability : CVE-2022-0995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds OOB memory write flaw was found in the Linux kernel's watchqueue event notification subsystem. This flaw can overwrite parts of the kernel stat...

7.8CVSS6.8AI score0.09441EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2020-29374

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a...

3.6CVSS6.3AI score0.00407EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2017-5049

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to...

8.8CVSS8.1AI score0.00858EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/16 12:00 a.m.5 views

PT-2025-11133 · Git +1 · Libvips

Name of the Vulnerable Software and Affected Versions: libvips affected versions not specified Description: The software contains a heap-buffer-overflow write issue occurring within the vips foreign save heif write block function, triggered during wbuffer write thread and vips threadset work...

7AI score
SaveExploits0References2
Rows per page
Query Builder