Browse CVEs

HIGH 7.8 CVE-2025-5200 A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::Inter… Assimp 5.4.3+ Fix from $1,9502025-05-26 MEDIUM 5.5 CVE-2025-5169 A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternRead… Assimp No fix yet Fix from $1,6002025-05-26 MEDIUM 5.5 CVE-2025-5168 A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImpo… Assimp No fix yet Fix from $1,6002025-05-26 MEDIUM 5.5 CVE-2025-5167 A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the funct… Assimp No fix yet Fix from $1,6002025-05-26 MEDIUM 5.5 CVE-2025-5166 A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::Int… Assimp No fix yet Fix from $1,6002025-05-26 MEDIUM 5.5 CVE-2025-5165 A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::Valid… Assimp No fix yet Fix from $1,6002025-05-26 MEDIUM 5.5 CVE-2023-53154 parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called. Cjson 1.7.18+ Fix from $1,6002025-05-23 HIGH 7.5 CVE-2022-31812 A vulnerability has been identified in SiPass integrated (All versions < V2.95.3.18). Affected server applications contain an out of bounds read past… Sipass Integrated 2.95.3.18+ Fix from $1,9502025-05-23 MEDIUM 5.5 CVE-2025-46716 Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to vers… Sandboxie 1.15.12+ Fix from $1,6002025-05-22 HIGH 8.6 CVE-2025-20152 A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to c… Identity Services Engine Mitigation only Fix from $1,9502025-05-21 MEDIUM 6.5 CVE-2025-4969 A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. Th… Mitigation only Fix from $1,6002025-05-21 HIGH 7.1 CVE-2025-37975 In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[… Linux Kernel 6.12.25 / 6.14.4+ Fix from $1,9502025-05-20 HIGH 7.1 CVE-2025-37973 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentati… Linux Kernel 6.6.91 / 6.12.29+ Fix from $1,9502025-05-20 MEDIUM 5.5 CVE-2025-37911 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -w When retrieving the FW cor… Linux Kernel 4.20 / 5.5+ Fix from $1,6002025-05-20 HIGH 7.8 CVE-2025-47756 V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::set_mr400_strc function. Opening specially crafted… Monitouch V Sft 6.2.6.0+ Fix from $1,9502025-05-19 HIGH 7.8 CVE-2025-47757 V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll!set_plc_type_default function. Opening specially crafted V7 or… Monitouch V Sft 6.2.6.0+ Fix from $1,9502025-05-19 HIGH 7.8 CVE-2025-47753 V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or… Monitouch V Sft 6.2.6.0+ Fix from $1,9502025-05-19 HIGH 7.8 CVE-2025-47754 V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!Conv_Macro_Data function. Opening specially crafted V7 or V8 file… Monitouch V Sft 6.2.6.0+ Fix from $1,9502025-05-19 HIGH 7.8 CVE-2025-47755 V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4_SaveEnvFile function. Opening specially crafted V7 or V8 file… Monitouch V Sft 6.2.6.0+ Fix from $1,9502025-05-19 CRITICAL 9.8 CVE-2025-4918EPSS 9% An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability was fixed in Firefox 138.0.4, Fir… Firefox 115.23.1 / 128.10.1+ Fix from $2,3002025-05-17 HIGH 8.8 CVE-2025-4919EPSS 9% An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in… Firefox 115.23.1 / 128.10.1+ Fix from $1,9502025-05-17 MEDIUM 5.5 CVE-2025-48188 libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, le… Pspp after 2.0.1 Fix from $1,6002025-05-16 HIGH 7.8 CVE-2025-30419 There is a memory corruption vulnerability due to an out of bounds read in GetSymbolBorderRectSize() when using the SymbolEditor in NI Circuit Design… Circuit Design Suite 14.3.1+ Fix from $1,9502025-05-15 HIGH 7.8 CVE-2025-30420 There is a memory corruption vulnerability due to an out of bounds read in Bitmap::InternalDraw() when using the SymbolEditor in NI Circuit Design Su… Circuit Design Suite 14.3.1+ Fix from $1,9502025-05-15 MEDIUM 6.5 CVE-2024-56427 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110… Exynos 980 Firmware Mitigation only Fix from $1,6002025-05-14 CRITICAL 9.1 CVE-2025-27891 An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 24… Exynos 980 Firmware Mitigation only Fix from $2,3002025-05-14 MEDIUM 5.5 CVE-2025-43551 Substance3D - Stager versions 3.1.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… Substance 3d Stager 3.1.2+ Fix from $1,6002025-05-13 HIGH 8.4 CVE-2025-20101 Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of servi… Mitigation only Fix from $1,9502025-05-13 MEDIUM 6.1 CVE-2025-20026 Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially… Proset\/wireless Wifi 23.100.0+ Fix from $1,6002025-05-13 HIGH 7.8 CVE-2025-32704 Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. 365 Apps Mitigation only Fix from $1,9502025-05-13