Lucene search
+L

90 matches found

OSV
OSV
•added 2026/05/06 8:53 p.m.•18 views

GHSA-PGGP-6C3X-2XMX Snappier has an infinite loop during SnappyStream decompression with malformed framed input

Summary Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. Details The hang manifests as a userspace busy loop with SnappyStreamDecompressor.Decompress repeatedly calling Crc32CAlgorithm.Append. The exact...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/06 8:53 p.m.•28 views

Snappier has an infinite loop during SnappyStream decompression with malformed framed input

Summary Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream as small as 15 bytes. Details The hang manifests as a userspace busy loop with SnappyStreamDecompressor.Decompress repeatedly calling Crc32CAlgorithm.Append. The exact...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/05/06 12:00 a.m.•24 views

PT-2026-38299

Name of the Vulnerable Software and Affected Versions Snappier affected versions not specified Description A denial of service issue exists where Snappier.SnappyStream enters an uncatchable infinite loop when decompressing a malformed framed-format Snappy stream. This occurs when the...

7.5CVSS5.8AI score0.0046EPSS
SaveExploits0References7
Microsoft CVE
Microsoft CVE
•added 2026/04/30 8:11 a.m.•18 views

Apache Thrift: Go TFramedTransport uint32 overflow

...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0
OSV
OSV
•added 2026/04/28 12:31 p.m.•14 views

GHSA-WF45-Q9CH-Q8GH Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/04/28 12:31 p.m.•19 views

Apache Thrift TFramedTransport Go language implementation has an Integer Overflow or Wraparound vulnerability

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/04/28 10:16 a.m.•25 views

DEBIAN-CVE-2026-41602

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/04/28 9:19 a.m.•19 views

CVE-2026-41602

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0
OSV
OSV
•added 2026/04/28 9:19 a.m.•11 views

CVE-2026-41602 Apache Thrift: Go TFramedTransport uint32 overflow

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score
SaveExploits0References17
Snyk
Snyk
•added 2026/04/28 9:19 a.m.•10 views

Integer Overflow or Wraparound

Overview github.com/apache/thrift/lib/go/thrift is a Go implementation of the Apache Thrift library. Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper handling of integer values in the TFramedTransport function on 32-bit architectures. An attacker...

8.2CVSS5.7AI score0.0138EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/28 9:19 a.m.•17 views

EUVD-2026-26020

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/28 9:19 a.m.•12 views

CVE-2026-41602 Apache Thrift: Go TFramedTransport uint32 overflow

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.9AI score0.0138EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/28 9:19 a.m.•14 views

CVE-2026-41602

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

5.9AI score0.0138EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/28 9:19 a.m.•169 views

CVE-2026-41602

An Integer Overflow or Wraparound vulnerability exists in the Apache Thrift TFramedTransport Go language implementation. This issue affects versions before 0.23.0 and can lead to high availability impact, specifically a denial of service (DoS) as indicated by the CVSS vector. Impacted software in...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0References15Affected Software1
AlpineLinux
AlpineLinux
•added 2026/04/28 9:19 a.m.•25 views

CVE-2026-41602

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.9AI score0.0138EPSS
SaveExploits0
OSV
OSV
•added 2025/11/11 1:15 a.m.•16 views

CVE-2025-42893

Due to an Open Redirect vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site displayed within an embedded frame. Successful exploitation could allow the attacker to steal...

6.1CVSS5.6AI score0.00228EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-4178

Malware in sbrugna...

5CVSS6.1AI score0.01961EPSS
SaveExploits0References18
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2021-1876

Malware in sbrugna...

9.8CVSS9AI score0.01649EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-32891

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiting a website that frames malicious conten...

6.1CVSS6.8AI score0.00711EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-0155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was possible due to framing arbitrary content...

5.4CVSS5.8AI score0.00773EPSS
SaveExploits1References2
Rows per page
Query Builder