Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Data publikacji: ostatnie 7 dni. Starsze wpisy dostępne w pełnym katalogu i widoku KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon Staff or Salon Worker role to reset any other user's role, including administrators, to a customer…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects,…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
During Xenstore live update the state record for a Xenstore watch with
specified watch depth is written with two bytes missing. This results
in an inconsistent state when reading the state back in the new Xenstore,
causing a crash of Xenstore or wrong Xenstore data.
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read…
Opis źródłowy NVD · ENCVSS 5,5 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution. The `checkTemplate()` validation restricts relative directory traversal sequences such as `../` but does not reject absolute paths, allowing an authorized…
Opis źródłowy NVD · ENCVSS 5,4 · EPSS 0,58 % · rekomendacja wg zapisanej polityki
CVSS
5,4
EPSS
0,58 %
Poprawka
Status poprawki nieustalony
Publikacja
Aktualizacja NVD
Podatności: opis, rekomendacja, CVSS, EPSS i daty źródłowe. Rekomendacja nie potwierdza podatności własnego zasobu.
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,14 % · rekomendacja wg zapisanej polityki
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon Staff or Salon Worker role to reset any other user's role, including administrators, to a customer…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. Attackers can set the 512-character flag without the custom-font flag, causing drawchar() to index a NULL…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the image buffer by supplying crafted ICO files. Attackers can provide an ICO whose inner bitmap width is not a multiple of 8, causing a heap over-read that…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits from_address memory access. safe_getattr blocks the ctypes module but not reachable ctypes type objects,…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,13 % · rekomendacja wg zapisanej polityki
During Xenstore live update the state record for a Xenstore watch with
specified watch depth is written with two bytes missing. This results
in an inconsistent state when reading the state back in the new Xenstore,
causing a crash of Xenstore or wrong Xenstore data.
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,12 % · rekomendacja wg zapisanej polityki
A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,11 % · rekomendacja wg zapisanej polityki
A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,1 % · rekomendacja wg zapisanej polityki
A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created without restrictive permissions, making it world-readable under the default process umask. A local attacker can read…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,5 · EPSS 0,09 % · rekomendacja wg zapisanej polityki
Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution. The `checkTemplate()` validation restricts relative directory traversal sequences such as `../` but does not reject absolute paths, allowing an authorized…
Opis źródłowy NVD · EN
Do wiadomości
CVSS 5,4 · EPSS 0,58 % · rekomendacja wg zapisanej polityki
5,4
0,58 %
Publikacja
Aktualizacja NVD
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.