https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:32:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-06230 bdu:2024-06230 https://cve.radiocsirt.org/vuln/bdu:2024-06230 https://cve.radiocsirt.org/vuln/bell-cve-2024-39684 <p><strong>Affected:</strong> Alpaquita:23: rapidjson, Alpaquita:25: rapidjson, Alpaquita:stream: rapidjson</p> <p><strong>Affected:</strong> Alpaquita:23: rapidjson, Alpaquita:25: rapidjson, Alpaquita:stream: rapidjson</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-39684 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0557 certfr-2024-avi-0557 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0557 https://cve.radiocsirt.org/vuln/euvd-2026-161511 EUVD-2026-161511 https://cve.radiocsirt.org/vuln/euvd-2026-161511 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39684 <p>Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.</p> <p>Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-39684 https://cve.radiocsirt.org/vuln/sca-2025-0006 <p>The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive. Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege. Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege. SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally all…</p> <p>The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive. Tencent RapidJSON is vulnerable to privilege escalation due to an integer underflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer underflow vulnerability (when the file is parsed), leading to elevation of privilege. Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the GenericReader::ParseNumber() function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege. SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE. A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally all…</p> https://cve.radiocsirt.org/vuln/sca-2025-0006 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39684 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rapidjson, Ubuntu:Pro:18.04:LTS: rapidjson, Ubuntu:Pro:20.04:LTS: rapidjson, Ubuntu:Pro:22.04:LTS: rapidjson, Ubuntu:Pro:24.04:LTS: rapidjson, Ubuntu:25.10: rapidjson, Ubuntu:26.04:LTS: rapidjson</p> <p>Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rapidjson, Ubuntu:Pro:18.04:LTS: rapidjson, Ubuntu:Pro:20.04:LTS: rapidjson, Ubuntu:Pro:22.04:LTS: rapidjson, Ubuntu:Pro:24.04:LTS: rapidjson, Ubuntu:25.10: rapidjson, Ubuntu:26.04:LTS: rapidjson</p> <p>Tencent RapidJSON is vulnerable to privilege escalation due to an integer overflow in the `GenericReader::ParseNumber()` function of `include/rapidjson/reader.h` when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened; this triggers the integer overflow vulnerability (when the file is parsed), leading to elevation of privilege.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-39684 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1579 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Versionen von Microsoft Windows und Microsoft Windows Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, Informationen offenzulegen, Dateien zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1579