<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>CyberArk Labs — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/cyberark" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by CyberArk Labs (cyberark).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/cyberark.png</url>
      <title>CyberArk Labs — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:06 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-9810 · 6.8 MEDIUM — TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes</title>
      <link>https://vulnogram.org/CVE-2025-9810</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-9810</guid>
      <description>TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen(&quot;w&quot;) on the history path and subsequent chmod() on the same path.</description>
      <category>Medium</category>
      <pubDate>Mon, 01 Sep 2025 19:03:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-9809 · 8.4 HIGH</title>
      <link>https://vulnogram.org/CVE-2025-9809</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-9809</guid>
      <description>Out-of-bounds write in cdfs_open_cue_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary code via a crafted .cue file with a file path exceeding PATH_MAX_LENGTH that is copied using memcpy into a fix…</description>
      <category>High</category>
      <pubDate>Mon, 01 Sep 2025 18:38:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-8854 · 8.4 HIGH — bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)</title>
      <link>https://vulnogram.org/CVE-2025-8854</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-8854</guid>
      <description>Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indire…</description>
      <category>High</category>
      <pubDate>Mon, 11 Aug 2025 04:24:02 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-0518 · 4.8 MEDIUM — Unchecked sscanf return value which leads to memory data leak</title>
      <link>https://vulnogram.org/CVE-2025-0518</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-0518</guid>
      <description>Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issu…</description>
      <category>Medium</category>
      <pubDate>Thu, 16 Jan 2025 16:45:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-7701 · 5.1 MEDIUM — Misuse of SHA256 to create an encryption key</title>
      <link>https://vulnogram.org/CVE-2024-7701</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-7701</guid>
      <description>Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0.</description>
      <category>Medium</category>
      <pubDate>Sun, 15 Dec 2024 10:56:26 GMT</pubDate>
    </item>
  </channel>
</rss>
