Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file,…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltf_validate() to read adjacent heap memory into vertex data…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or…
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
Opis źródłowy NVD · ENCVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.
Opis źródłowy NVD · ENCVSS 6,7 · EPSS 1,11 % · rekomendacja wg zapisanej polityki
CVSS
6,7
EPSS
1,11 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP volume shell items. Attackers can embed a 10 to 53 byte shell item with item data size of 44 or more in a .lnk file,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string character count. Attackers can supply a crafted .xls file declaring 0xFFFF two-byte characters in LABEL, STRING, or SST…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini values. Attackers can supply a MIRAX slide whose CameraImageDivisionsPerSide does not evenly divide the image counts,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allocation. Attackers can craft a BitLocker volume image with inflated dataset or datum sizes that, when opened or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signed…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Attackers can supply a crafted glTF or GLB file that passes cgltf_validate() to read adjacent heap memory into vertex data…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of-bounds reads. Attackers can supply a crafted geometry BLOB with a large point count, for example in a SpatiaLite…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BLOBs. Attackers can supply a crafted polygon in a SpatiaLite database or ST_GeomFromWKB input to crash the process or…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-privileged users in the system will be able to extract secrets from it.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,9 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code locally.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 6,7 · EPSS 1,11 % · rekomendacja wg zapisanej polityki
6,7
1,11 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.