Lucene search
+L

8726 matches found

Vulnrichment
Vulnrichment
added 2026/06/01 9:00 p.m.15 views

CVE-2018-25427 Arm Whois 3.11 Buffer Overflow via SEH Overwrite

Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception...

9.8CVSS6.6AI score0.00923EPSS
SaveExploits0References4
CVE
CVE
added 2026/06/01 9:00 p.m.34 views

CVE-2018-25427

CVE-2018-25427 pertains to Arm Whois 3.11, where a stack-based buffer overflow allows remote code execution by sending oversized input to the IP address or domain field. Input longer than 658 bytes with shellcode can overwrite the Structured Exception Handler, enabling command execution during pr...

9.8CVSS6.6AI score0.00923EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.52 views

PT-2026-45623

Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A buffer overflow allows local attackers to execute arbitrary code by overwriting the structured exception handler. By crafting a malicious input file with a 672-byte offset, an attacker can overwrite the nSE...

8.6CVSS6.8AI score0.00162EPSS
SaveExploits0References7
OSV
OSV
added 2026/06/01 12:00 a.m.22 views

PUB-A-373409261

In smmuattachdev of arm-smmu-v3.c, there is a possible way to sign malicious Android Runtime bootclass artifacts due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00067EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/01 12:00 a.m.31 views

PT-2026-45618

Name of the Vulnerable Software and Affected Versions Arm Whois version 3.11 Description A stack-based buffer overflow occurs when the application processes oversized input in the IP address or domain fields. Remote attackers can provide input exceeding 658 bytes containing shellcode to overwrite...

9.8CVSS6.4AI score0.00923EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.20 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of ArmCode Arm Whois contains a security vulnerability. This vulnerability stems from a buffer overflow, which may allow local attackers to execute arbitrary code by overriding structured exception...

8.6CVSS6.2AI score0.00162EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/01 12:00 a.m.27 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of ArmCode Arm Whois contains a security vulnerability. This vulnerability stems from a stack buffer overflow, which could allow remote attackers to execute arbitrary code by providing excessive input...

9.8CVSS6.2AI score0.00923EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/30 4:17 p.m.32 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS0.0014EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/30 2:55 p.m.30 views

CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/30 2:55 p.m.32 views

EUVD-2018-21945

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/30 2:55 p.m.13 views

CVE-2018-25423

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/05/30 2:55 p.m.37 views

CVE-2018-25423

Arm Whois 3.11 is affected by a local denial-of-service vulnerability due to a buffer overflow when processing an oversized input string (about 700 bytes) in the IP address or domain field. The flaw allows local attackers to crash the application. No remediation, patch version, or exploit details...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/30 2:55 p.m.50 views

CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS0.0014EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/30 12:00 a.m.22 views

ArmCode Arm Whois 安全漏洞

ArmCode Arm Whois is a web information query tool developed by ArmCode Corporation. Version 3.11 of Arm Whois contains a security vulnerability; this vulnerability stems from a buffer overflow, which could allow local attackers to cause the application to crash by providing excessively long input...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/30 12:00 a.m.26 views

PT-2026-45123

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...

6.9CVSS6AI score0.0014EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/05/28 9:11 p.m.18 views

CVE-2026-46147

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. During the vCPU initialization process, a pin leak can occur, leading to a permanent loss of references to host vCPU and SVE state pages. Additionally, a concurrent process might observe a partially...

5.5CVSS5.8AI score0.00126EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/28 11:40 a.m.14 views

SUSE-SU-2026:21860-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-2058: x86/CPU: Fix FPDSS on Zen1 bsc1243603. - CVE-2024-14027: xattr: switch to CLASSfd bsc1259420. - CVE-2025-40181: x86/kvm: Force legacy PCI hole to UC when...

9.8CVSS6.6AI score0.01501EPSS
SaveExploits20References455
OSV
OSV
added 2026/05/28 10:16 a.m.30 views

UBUNTU-CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

5.5CVSS5.7AI score0.00126EPSS
SaveExploits0References14
Cvelist
Cvelist
added 2026/05/28 9:36 a.m.44 views

CVE-2026-46147 KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

0.00126EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/05/28 9:36 a.m.16 views

CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in pkvminitvcpu Two bugs exist in the vCPU initialisation path: 1. If a check fails after hyppinsharedmem succeeds, the cleanup path jumps to 'unlock' without calling unpinhostvcp...

5.5CVSS5.7AI score0.00126EPSS
SaveExploits0
Rows per page
Query Builder