Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-62821 | 9.1 | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_ | 2026-10-12 22:10:00 | 2026-06-19 14:16:21 |
| CVE-2025-15661 | 6.5 | libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftp_symlink() function in src/sftp.c that allows a malicious SSH server or man-in-the-middle attacker to disclose heap memory contents or cause | 2026-10-12 22:10:00 | 2026-06-18 21:16:27 |
| CVE-2025-53114 | 7.5 | CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowle | 2026-10-12 22:10:00 | 2026-06-18 17:16:27 |
| CVE-2025-71325 | 9.8 | picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pic | 2026-10-12 22:10:00 | 2026-06-17 17:16:41 |
| CVE-2025-71323 | 9.8 | picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll a | 2026-10-12 22:10:00 | 2026-06-17 17:16:41 |
| CVE-2025-71322 | 8.8 | PickleScan before 0.0.33 fails to include the pty.spawn function in its unsafe globals list, allowing attackers to bypass security checks. Malicious actors can craft pickle payloads using pty.spawn to achieve arbitrary code execution when files are p | 2026-10-12 22:10:00 | 2026-06-17 17:16:40 |
| CVE-2025-71321 | 9.8 | picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util.write_file. Attackers can construct malicious pickle objects to overwrite critical system f | 2026-10-12 22:10:00 | 2026-06-17 17:16:40 |
| CVE-2025-71320 | 9.8 | picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass security checks. Remote attackers can craft malicious pickle files using these unblocked func | 2026-10-12 22:10:00 | 2026-06-17 17:16:40 |
| CVE-2025-26240 | 8.4 | In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and the exfiltration of local files. | 2026-10-12 22:10:00 | 2026-06-17 17:16:38 |
| CVE-2025-66391 | 8.8 | In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to re | 2026-10-12 22:10:00 | 2026-06-17 14:17:31 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13457
Zapisa po stranici: