Lucene search
+L

23144 matches found

Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

An issue was discovered in uriparser through 0.9.7. ComposeQueryMallocExMm in UriQuery.c has an integer overflow via a long string.

...

5.9CVSS5.6AI score0.01316EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

Out-of-bounds write in exiv2

...

8.8CVSS7.3AI score0.00965EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

...

5.5CVSS5.5AI score0.00424EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user access a specially crafted URL.

...

6.1CVSS6AI score0.01132EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•7 views

GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information

...

7.5CVSS7.2AI score0.01103EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.

...

5.5CVSS5.4AI score0.00214EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields

...

7.5CVSS7.2AI score0.01091EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).

...

7.5CVSS6.4AI score0.02507EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service

...

5.5CVSS6.4AI score0.01453EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•9 views

Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers to cause a denial of service

...

7.8CVSS7.6AI score0.02771EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•7 views

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service

...

5.5CVSS5.7AI score0.01447EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

sctp: sysctl: udp_port: avoid using current->nsproxy

...

7.1CVSS7.4AI score0.00207EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

filemap: avoid truncating 64-bit offset to 32 bits

...

5.5CVSS7.4AI score0.00206EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

iomap: avoid avoid truncating 64-bit offset to 32 bits

...

5.5CVSS7.4AI score0.00202EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•8 views

Asio C++ Library lacks a fallback error code in the case of SSL_ERROR_SYSCALL

...

7.5CVSS4.6AI score0.00478EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

sctp: sysctl: auth_enable: avoid using current->nsproxy

...

7.1CVSS7.3AI score0.00232EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

...

6.2CVSS6.4AI score0.00364EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

fs/proc: fix softlockup in __read_vmcore (part 2)

...

5.5CVSS7.2AI score0.00225EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

usbnet: ipheth: fix possible overflow in DPE length check

...

7.1CVSS7.6AI score0.00213EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

nilfs2: fix possible int overflows in nilfs_fiemap()

...

5.5CVSS7.4AI score0.00227EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

ksmbd: fix integer overflows on 32 bit systems

...

9.8CVSS7.4AI score0.00584EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

ptp: Ensure info->enable callback is always set

...

5.5CVSS7.3AI score0.00223EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag

...

7.8CVSS7.4AI score0.00243EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

net/rose: prevent integer overflows in rose_setsockopt()

...

5.5CVSS7.4AI score0.00224EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic

...

8.8CVSS7.3AI score0.04793EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•7 views

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact

...

8.8CVSS7.1AI score0.05204EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

The libpng 0.71 allows context-dependent attackers to cause a NULL pointer dereference vectors

...

7.5CVSS7.8AI score0.05517EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

HTTP Request Smuggling in waitress

...

7.5CVSS7.8AI score0.0178EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•8 views

The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service

...

9.8CVSS7.2AI score0.02475EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

vsock/virtio: discard packets if the transport changes

...

7.8CVSS7.4AI score0.00227EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

net/mlx5: Clear port select structure when fail to create

...

5.5CVSS7.4AI score0.00199EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•3 views

bpf: Fix bpf_sk_select_reuseport() memory leak

...

5.5CVSS7.4AI score0.00219EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•11 views

btrfs: avoid NULL pointer dereference if no valid extent tree

...

5.5CVSS7.4AI score0.002EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•6 views

pktgen: Avoid out-of-bounds access in get_imix_entries

...

7.8CVSS7.4AI score0.00219EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()

...

7.8CVSS7.6AI score0.00206EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

openvswitch: fix lockup on tx to unregistering netdev with carrier

...

5.5CVSS7.4AI score0.002EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•4 views

net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel

...

5.5CVSS7.4AI score0.00173EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•7 views

Timing side-channel in ECDSA signature computation

...

4.1CVSS6.6AI score0.00601EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•7 views

sctp: sysctl: rto_min/max: avoid using current->nsproxy

...

5.5CVSS7.3AI score0.00224EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•8 views

net: fec: handle page_pool_dev_alloc_pages error

...

7.5CVSS7.4AI score0.00423EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 7:0 a.m.•5 views

smb: client: fix double free of TCP_Server_Info::hostname

...

9.8CVSS7.3AI score0.004EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 12:0 a.m.•5 views

CVE-2024-4030

...

7.1CVSS7AI score0.00303EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 12:0 a.m.•12 views

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

...

5.3CVSS8AI score0.09393EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2025/03/14 12:0 a.m.•5 views

In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.

...

7.1CVSS7.1AI score0.01488EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/14 12:0 a.m.•6 views

CVE-2024-3219

...

5.1CVSS7AI score0.00247EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:0 a.m.•4 views

hrtimers: Handle CPU state correctly on hotplug

...

7.8CVSS7.6AI score0.00233EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:0 a.m.•3 views

media: uvcvideo: Fix double free in error path

...

7.8CVSS7.2AI score0.00256EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:0 a.m.•7 views

soc: qcom: socinfo: Avoid out of bounds read of serial number

...

7.1CVSS7.9AI score0.0024EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:0 a.m.•5 views

tpm: Change to kvalloc() in eventlog/acpi.c

...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/13 7:0 a.m.•3 views

rdma/cxgb4: Prevent potential integer overflow on 32bit

...

5.5CVSS7.2AI score0.00241EPSS
SaveExploits0
Total number of security vulnerabilities23144