Lucene search
+L

33256 matches found

EUVD
EUVD
•added 2026/07/27 3:39 p.m.•17 views

EUVD-2026-49326

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

8.2CVSS5.9AI score0.00662EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/07/27 3:39 p.m.•14 views

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

8.2CVSS5.9AI score0.00662EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/27 3:39 p.m.•13 views

CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

8.2CVSS5.9AI score0.00662EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2026/07/27 3:39 p.m.•12 views

EEF-CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Summary Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The...

8.2CVSS5.9AI score0.00662EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/07/27 3:13 p.m.•17 views

CVE-2026-55737

Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...

7.5CVSS5.9AI score0.00513EPSS
SaveExploits0
OSV
OSV
•added 2026/07/27 2:16 p.m.•9 views

UBUNTU-CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

5.6CVSS5.8AI score0.00151EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/27 1:22 p.m.•20 views

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

5.6CVSS5.7AI score0.00151EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2026/07/27 11:32 a.m.•15 views

Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions...

7.1CVSS5.9AI score0.00443EPSS
SaveExploits0References12
OSV
OSV
•added 2026/07/27 11:32 a.m.•9 views

SUSE-SU-2026:3273-1 Security update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base

This update for jackson-annotations, jackson-bom, jackson-core, jackson-databind, jackson-dataformats-binary, jackson-modules-base fixes the following issues: - CVE-2026-54515: rebuilding the property map from unfiltered bean properties could permit a bypass of @JsonIgnoreProperties exclusions...

6.5CVSS5.9AI score0.00443EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/07/27 11:14 a.m.•20 views

CVE-2026-58389 Apache Thrift: Rust binary protocol non-strict path missing string size limit

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...

8.7CVSS5.8AI score0.0103EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2026/07/27 12:00 a.m.•12 views

Erlang/OTP -- heap corruption decoding invalidly encoded large tuples

The Erlang/OTP team reports: Fixed heap corruption when an invalidly encoded tuple with an arity of 2^31 or larger is decoded from Erlang's External Term Format binarytoterm...

7.5CVSS5.9AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•25 views

PT-2026-64993

Name of the Vulnerable Software and Affected Versions erlang otp versions 27.0 through 27.3.4.14 erlang otp version 28.5.0.3 erlang otp versions 29.0 through 29.0.3 erts versions 15.0 through 15.2.7.10 erts version 16.4.0.3 erts versions 17.0 through 17.0.3 Description An integer underflow exists...

8.2CVSS5.3AI score0.00662EPSS
SaveExploits0References45
EUVD
EUVD
•added 2026/07/25 8:50 a.m.•26 views

EUVD-2026-48898

In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before expansion btfparsestructmetas walks user-supplied BTF during BPFBTFLOAD, and btfrepeatfields expands repeatable fields from array elements into the fixed BTFFIELDSMAX scratch array...

5.9AI score0.00129EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•45 views

PT-2026-64300

Name of the Vulnerable Software and Affected Versions Loytec LIP-ME201C versions prior to 8.4.17 Loytec L-INX versions prior to 8.4.17 Loytec L-GATE versions prior to 8.4.17 Loytec L-ROC versions prior to 8.4.17 Loytec L-IOB versions prior to 8.4.17 Loytec L-DALI versions prior to 8.4.17 Loytec...

7.1CVSS6.3AI score0.00159EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2026/07/23 12:20 p.m.•30 views

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader. Group-IB found the...

5.6AI score
SaveExploits0
OSV
OSV
•added 2026/07/22 8:17 p.m.•13 views

UBUNTU-CVE-2026-9737

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

7.1CVSS5.9AI score0.00411EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/22 8:16 p.m.•18 views

CVE-2026-13072

When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default...

9.2CVSS0.00404EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 7:20 p.m.•9 views

CVE-2026-9737 Find command with $meta sort can lead to crash

During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformations leading to invariant failure...

7.1CVSS5.2AI score0.00411EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/22 7:17 p.m.•11 views

CVE-2026-13066

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...

7.1CVSS5.3AI score0.00369EPSS
SaveExploits0References2Affected Software1
MongoDB
MongoDB
•added 2026/07/22 7:17 p.m.•18 views

Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure

Improper handling of DBPointer objects during BSON serialization in MongoDB's server-side JavaScript engine can result in internal process memory contents being included in data returned to the client. This constitutes an unintended information disclosure affecting deployments that use server-sid...

7.1CVSS5.3AI score0.00369EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder