Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 583

Export CSV
CVE-2012-0828

xchat: Heap-based buffer overflow by processing UTF-8 line from server containing characters outside BMP

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

CVSS 3.1 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Gnome Xchat Xchat-wdk
Products
Gtk Xchat Xchat-wdk
CVE-2024-48909

SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not

SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied. LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0. The bug is patched as part of SpiceDB 1.37.1. As a workaround, disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`.

CVSS 3.1 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Authzed
Products
Spicedb
CVE-2024-31197

Improper Null Termination in libfluid_msg library

Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Open Networking Foundation Opennetworking
Products
Libfluid Libfluid Msg