Lucene search
+L

1364 matches found

Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.7 views

PT-2026-24764

Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh...

8.6CVSS6.3AI score0.00151EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.14 views

PT-2026-24765

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

8.6CVSS6.3AI score0.00113EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/03/06 7:45 p.m.4 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/03/06 12:0 a.m.11 views

Navtor NavBox 安全漏洞

Navtor NavBox is a shipping information system device developed by the Norwegian company Navtor. It is used for electronic nautical chart management and synchronization of navigation data. There is a security vulnerability in Navtor NavBox, which stems from the API/ais-data endpoint not handling...

5.3CVSS5.8AI score0.00261EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 4:16 p.m.20 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS0.00288EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/05 3:38 p.m.5 views

CVE-2026-30798

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.8AI score0.00288EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/05 3:38 p.m.6 views

CVE-2026-30798 RustDesk Client Accepts Unauthenticated stop-service Command via Strategy Payload

Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop, strategy processing modules allows Protocol Manipulation. This vulnerability is...

8.2CVSS5.9AI score0.00288EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.16 views

PT-2026-23463

Name of the Vulnerable Software and Affected Versions RustDesk Client versions through 1.4.5 Description A flaw exists in RustDesk Client related to insufficient verification of data authenticity and improper handling of exceptional conditions, specifically allowing protocol manipulation. The iss...

8.2CVSS5.9AI score0.00288EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.32 views

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities. These vulnerabilities stem from...

8.2CVSS5.8AI score0.00288EPSS
SaveExploits1References3
AstraLinux
AstraLinux
added 2026/03/03 9:29 a.m.5 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sparc: fixed inaccurate exception reporting in copyfromtouser for UltraSPARC. The referenced commit introduced exception handlers for user-space memory references in copyfromuser and copytouser. These handlers return from the...

6.1AI score0.00211EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.10 views

SUSE CVE-2026-25969

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released,...

4CVSS5.8AI score0.0036EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/02/24 3:43 p.m.10 views

Image Magick has a Memory Leak in coders/ashlar.c

Memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. bash ==78968== Memcheck, a memory error detector ==78968== Copyright C 2002-2022, and GNU...

7.5CVSS5.4AI score0.0036EPSS
SaveExploits0References5Affected Software18
OSV
OSV
added 2026/02/24 3:43 p.m.5 views

GHSA-XGM3-V4R9-WFGM Image Magick has a Memory Leak in coders/ashlar.c

Memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. bash ==78968== Memcheck, a memory error detector ==78968== Copyright C 2002-2022, and GNU...

5.3CVSS5.5AI score0.0036EPSS
SaveExploits0References5
OSV
OSV
added 2026/02/24 1:33 a.m.6 views

CVE-2026-25969 ImageMagick has Memory Leak in coders/ashlar.c

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released,...

5.3CVSS5.5AI score0.0036EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/24 1:33 a.m.33 views

CVE-2026-25969

CVE-2026-25969 is a memory leak in ImageMagick's coders/ashlar.c (WriteASHLARImage) that occurs when an exception is thrown before release of allocated memory. A patch exists in ImageMagick version 7.1.2-15; multiple advisories (SUSE/openSUSE SU-2026-0851/0852, Debian DSA-6158) reference this CVE...

7.5CVSS5.4AI score0.0036EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.7 views

PT-2026-21629

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 Description ImageMagick is software used for editing and manipulating digital images. A memory leak exists in the coders/ashlar.c file, specifically within the WriteASHLARImage function. When an exception...

9.8CVSS7.1AI score0.00671EPSS
SaveExploits1References144
UbuntuCve
UbuntuCve
added 2026/02/24 12:0 a.m.5 views

CVE-2026-25969

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in coders/ashlar.c. The WriteASHLARImage allocates a structure. However, when an exception is thrown, the allocated memory is not properly released,...

7.5CVSS5.9AI score0.0036EPSS
SaveExploits0References2
Redos
Redos
added 2026/02/20 12:0 a.m.9 views

ROS-20260220-73-0001

Vulnerability of usbnetreadcmd function of include/linux/etherdevice.h library of Linux kernel with exception handling flaws. Exploitation of the vulnerability may allow an attacker to cause a denial of service...

7.1CVSS7.1AI score0.00163EPSS
SaveExploits0
Hacker One
Hacker One
added 2026/02/16 10:41 p.m.16 views

Python Cryptographic Authority: Fail-Open in set_tlsext_servername_callback on pyopenssl via unhandled exceptions leads to security bypass

A vulnerability was discovered in the pyopenssl library's handling of the Server Name Indication SNI callback settlsextservernamecallback. The internal wrapper for this callback catches all Python exceptions raised by user code but returns 0 Success/SSLTLSEXTERROK to the underlying OpenSSL engine...

5.8AI score
SaveExploits0
CNNVD
CNNVD
added 2026/02/12 12:0 a.m.8 views

SurfOffline Professional 安全漏洞

SurfOffline Professional is a website download tool provided by the SurfOffline company. The version 2.2.0.103 of SurfOffline Professional contains a security vulnerability. This vulnerability stems from an issue with structured exception handling in the program’s name input, which may lead to a...

7.5CVSS5.8AI score0.00314EPSS
SaveExploits0References5
Rows per page
Query Builder