Lucene search
+L

331225 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•11 views

CVE-2026-110837: Heap-based Buffer Overflow

FreeRDP 2.0.0 before 3.32.0, when built with WITHLAME=ON and WITHDSPFFMPEG=OFF, has a heap-based buffer overflow in freerdpdspdecodemp3 because the right-channel PCM pointer is offset by a byte count treated as short elements. A malicious RDP server can send MP3 audio over rdpsnd so decoded sampl...

7.1CVSS5.9AI score0.00373EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•9 views

CVE-2026-86562: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler...

7.8CVSS6.1AI score0.00176EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•11 views

CVE-2026-103994: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

8.8CVSS8.8AI score0.00429EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
•added 2026/10/14 12:00 a.m.•27 views

Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple...

9.8CVSS6.6AI score0.01071EPSS
SaveExploits1References24
FreeBSD
FreeBSD
•added 2026/10/14 12:00 a.m.•21 views

FreeBSD -- Remotely triggerable buffer overflow in tcp_rack

Problem Description: When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length allocation followed by a copy of the existing samples into the undersized buffer. A remote peer...

9.1CVSS6.1AI score0.00313EPSS
SaveExploits0
osv_alsa
osv_alsa
•added 2026/10/14 12:00 a.m.•8 views

ALSA-2026:82883 Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple...

9.8CVSS6.6AI score0.01071EPSS
SaveExploits1References24
osv_alsa
osv_alsa
•added 2026/10/14 12:00 a.m.•12 views

ALSA-2026:82882 Important: hplip security, bug fix, and enhancement update

The hplip packages contain the Hewlett-Packard Linux Imaging and Printing Project HPLIP, which provides drivers for Hewlett-Packard printers and multi-function peripherals. Security Fixes: hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple...

9.8CVSS6.6AI score0.01071EPSS
SaveExploits1References24
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•15 views

PT-2026-114280

The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get packet length and validates it in verify rxfifo validity drivers/ieee802154/ieee802154 cc1200.c. That validation only enforced a lower bound pkt len data and then calls net buf ad...

6.8CVSS6AI score0.00286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-114345

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv handler fixed-slot copy TlmRecv handler copies val.getSize bytes into entry.channelSize storage without confirming that the runtime...

6.5CVSS5.9AI score0.00445EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113744

Name of the Vulnerable Software and Affected Versions gst-plugins-base affected versions not specified Description A heap buffer overflow occurs when processing video buffers where the attached GstVideoMeta metadata specifies plane strides and offsets that exceed the actual memory allocation. Thi...

8.4CVSS6.5AI score0.00193EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113928

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

9.8CVSS5.9AI score0.00455EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113920

🚨 CVE-2026-102084 An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN...

9.2CVSS6.3AI score0.00509EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•14 views

PT-2026-113966

🚨 CVE-2026-103994 A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution. 🎖@cveNotify...

8.8CVSS8.5AI score0.00429EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-113842

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description A stack-based buffer overflow occurs in the routing protocol daemon rpd. This issue allows a remote...

9.8CVSS9AI score0.00568EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•15 views

PT-2026-113855

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Description A stack-based buffer overflow occurs in the authd process. An attacker who can influence a configured RADIUS server can send a malicious RADIUS response to cause the authd...

8.8CVSS6.8AI score0.0035EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-113835

🚨 CVE-2026-101983 A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured. 🎖@cveNotify...

9.8CVSS6.4AI score0.0054EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•15 views

PT-2026-113833

🚨 CVE-2026-101981 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message. 🎖@cveNotify...

8.8CVSS6.8AI score0.00245EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•16 views

PT-2026-113890

A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated...

8.8CVSS5.9AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•22 views

PT-2026-113926

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

8.8CVSS5.9AI score0.00298EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/14 12:00 a.m.•19 views

PT-2026-113931

Name of the Vulnerable Software and Affected Versions Junos OS on MX Series versions prior to 21.2R3-S11 Junos OS on MX Series versions 21.4 through 21.4R3-S11 Junos OS on MX Series versions 22.2 through 22.2R3-S7 Junos OS on MX Series versions 22.3 through 22.3R3-S4 Junos OS on MX Series version...

9.8CVSS6.6AI score0.00411EPSS
SaveExploits0References6
Rows per page
Query Builder