Lucene search
+L

248 matches found

NVD
NVD
•added 2026/01/16 7:16 p.m.•24 views

CVE-2021-47824

iDailyDiary 4.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the preferences tab name field. Attackers can paste a 2,000,000 character buffer into the default diary tab name to trigger an application crash...

7.5CVSS0.00353EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/01/15 11:25 p.m.•5 views

CVE-2021-47815 Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash...

7.5CVSS6AI score0.00484EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/01 12:00 a.m.•15 views

PT-2026-4915

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw exists in the GLib Base64 encoding routine when handling very large input data. The issue stems from the incorrect use of integer types during length calculation, potentially leading to...

5.4CVSS5.8AI score0.00441EPSS
SaveExploits1References28
CVE
CVE
•added 2025/12/22 9:35 p.m.•22 views

CVE-2022-50689

CVE-2022-50689 affects Cobian Reflector 0.9.93 RC1. A denial-of-service can be triggered by overflowing the password input field during SFTP task configuration, e.g., pasting an ~8000-byte buffer into the password field, causing the application to crash. Multiple connected sources (NVD/NVD-derive...

6.9CVSS6AI score0.00211EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2025/12/18 9:15 p.m.•14 views

CVE-2025-34450 merbanan/rtl_433 <= 25.02 Stack-based Buffer Overflow

merbanan/rtl433 versions up to and including 25.02 and prior to commit 25e47f8 contain a stack-based buffer overflow vulnerability in the function parserfraw located in src/rfraw.c. When processing crafted or excessively large raw RF input data, the application may write beyond the bounds of a...

6.9CVSS6.4AI score
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2025/12/15 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2025-67899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.9AI score0.00141EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/14 11:15 p.m.•14 views

AZL-72379 CVE-2025-67899 affecting package uriparser 0.9.8-3

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.8AI score0.00141EPSS
SaveExploits0References1
OSV
OSV
•added 2025/12/14 11:15 p.m.•21 views

UBUNTU-CVE-2025-67899

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas...

2.9CVSS5.8AI score0.00141EPSS
SaveExploits0References5
Snyk
Snyk
•added 2025/12/14 10:39 p.m.•12 views

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the ParseMustBeSegmentNzNc function when processing large input containing many commas. An attacker can cause excessive stack consumption and application crash by supplying specially crafted input. Remediation...

4CVSS5.3AI score0.00141EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/14 10:17 p.m.•62 views

CVE-2025-67899

CVE-2025-67899 affects uriparser up to version 0.9.9, where unbounded recursion leads to stack consumption on large inputs (ParseMustBeSegmentNzNc with many commas). Connected advisories confirm the issue and direct upgrade to uriparser-1.0.0 as the remediation (e.g., Fedora/FEDORA advisories). O...

2.9CVSS5.9AI score0.00141EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/04 7:16 p.m.•16 views

AZL-71452 CVE-2025-65637 affecting package delve 1.5.0-16

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
OSV
OSV
•added 2025/12/04 7:16 p.m.•12 views

AZL-71560 CVE-2025-65637 affecting package cf-cli for versions less than 8.4.0-26

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...

7.5CVSS7.2AI score0.0063EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2025/12/01 6:13 p.m.•15 views

CVE-2025-13837

When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a malicious file can cause OOM and DoS issues...

5.5CVSS6.6AI score0.00223EPSS
SaveExploits0References10Affected Software1
Snyk
Snyk
•added 2025/11/24 1:00 p.m.•12 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the gescapeuristring function. An attacker can cause a heap-based buffer overflow by supplying a string with a very large number of characters requiring escaping, which results in an incorrect...

7.7CVSS6.9AI score0.00322EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/11/05 4:14 a.m.•12 views

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS7.1AI score0.00081EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/04 4:15 a.m.•12 views

CVE-2025-47365

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS0.00081EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/04 3:19 a.m.•35 views

CVE-2025-47365

CVE-2025-47365 concerns a memory corruption issue in Qualcomm Chipsets/Automotive Platform caused by processing large input data received from a remote source over a communication interface. The root cause is described as an integer overflow or wraparound in the affected data handling. Impact is ...

7.8CVSS6.8AI score0.00081EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/11/04 3:19 a.m.•27 views

CVE-2025-47365 Integer Overflow or Wraparound in Automotive Platform

Memory corruption while processing large input data from a remote source via a communication interface...

7.8CVSS0.00081EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•28 views

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which arises from a memory corruption when processing large input data from a communication interface from a remote source...

7.8CVSS7AI score0.00081EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/10/30 5:10 p.m.•1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Vector.ReadFrom function. An attacker can cause excessive memory allocation and application crashes by providing maliciously crafted input data containing large length fields. This can result in denial of...

8.7CVSS7AI score
SaveExploits0References2
Rows per page
Query Builder