3966 matches found
CVE-2024-4323
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de...
DEBIAN-CVE-2026-90557
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...
EUVD-2026-76902
Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sgloadplayerunit when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a...
EUVD-2026-75759
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index
Overview An out-of-bounds OOB memory access vulnerability involving unchecked array indexing has been identified in the exllamav3ext compute unified device architecture CUDA extension. Successful exploitation can lead to an immediate denial of service or application instability. This vulnerabilit...
CVE-2025-14847-MongoDB
CVE-2025-14847-Herramienta de Investigación de Revelación de Memoria en MongoDB Resumen Este repositorio contiene una herramienta de investigación educativa diseñada para demostrar los conceptos de seguridad de memoria detrás de CVE-2025-14847, una vulnerabilidad crítica descubierta en la...
CVE-2026-86093
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands on Db2 clients due to a stack-based buffer overflow that improperly copies user-controlled data into a fixed-size stack...
CVE-2025-53367-POC
djvulibremmrexploit Este proyecto proporciona una implementación mínima en C++ que desencadena una vulnerabilidad conocida de escritura fuera de los límites del heap en DjVuLibre. El código no convierte el fallo en un arma; solo reproduce la ruta de ejecución defectuosa para que el problema pueda...
CVE-2003-0264-SLmail-5.5
CVE-2003-0264 - Desbordamiento de búfer POP3 de Seattle Lab Mail 5.5 Referencias https://vulners.com/cve/CVE-2003-0264 Vulnerabilidad SLMail no realiza comprobación de límites al enviar una contraseña POP3. Como resultado, se puede ejecutar código arbitrario enviando un PASS POP3 largo y malforma...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053430)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053430 advisory. In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy In preparation for FORTIFYSOURCE performing compile-ti...
UBUNTU-CVE-2026-71220
A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...
AZL-99897 CVE-2026-71220 affecting package gfs2-utils 3.5.1-1
A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without bounds checking, causing a stack buffer overflow that may lead to arbitrary code execution when processing crafted GFS2 filesystem image...
CVE-2026-81532 BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...
CVE-2026-81532
CVE-2026-81532 affects the MongoDB Connector for BI ODBC driver . The root cause is improper bounds checking on a positioned-cursor statement's cursor name : because the name length is not bounded before the driver builds its diagnostic message, an overly long name overwrites memory adjacent to a...
BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption
A user able to submit SQL through an application using the MongoDB Connector for BI ODBC driver can supply a positioned-cursor statement whose cursor name exceeds the size of an internal fixed-length buffer. Because the name length is not bounded before the driver builds its diagnostic message,...
CVE-2026-81575
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
EUVD-2026-66982
If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and the data itself. Missing bounds checking on the data length value can lead to out of bounds reads, causing a segmentation fault that ultimately crashes...
EUVD-2026-66459
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
CVE-2026-80544
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...
CVE-2026-80544
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...