Lucene search
+L

1760 matches found

CNNVD
CNNVD
added 2025/05/01 12:0 a.m.10 views

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from the LS command handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of...

9.8CVSS7.2AI score0.00658EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/05/01 12:0 a.m.5 views

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server suffers from a buffer overflow vulnerability, which originates from the SEND command handler failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a deni...

9.8CVSS7.2AI score0.00658EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/04/30 12:0 a.m.8 views

NETGEAR JWNR2000 安全漏洞

The NETGEAR JWNR2000v2 is a wireless router from NETGEAR. The NETGEAR JWNR2000v2 suffers from a buffer overflow vulnerability that stems from the sub41A914 function parameter host failing to correctly validate the length size of the input data, no detailed vulnerability details are provided at th...

9.8CVSS7.2AI score0.00598EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/23 12:0 a.m.7 views

Luxion KeyShot Viewer 安全漏洞

Luxion KeyShot Viewer is a free, standalone desktop application from Luxion Corporation. A security vulnerability exists in Luxion KeyShot Viewer that stems from a failure to validate the length of user data when parsing KSP files, which could lead to a heap buffer overflow and remote code...

7.8CVSS8.2AI score0.00343EPSS
SaveExploits0References2
OSV
OSV
added 2025/04/21 1:15 a.m.3 views

DEBIAN-CVE-2025-43970

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...

5.3CVSS4.3AI score0.00405EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/21 12:0 a.m.12 views

CVE-2025-43970

An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...

4.3CVSS6.8AI score0.00405EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/18 3:50 p.m.13 views

CVE-2025-29784 NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to...

7.5CVSS7.5AI score0.00619EPSS
SaveExploits1References3
CVE
CVE
added 2025/04/18 3:50 p.m.65 views

CVE-2025-29784

CVE-2025-29784 affects NamelessMC (2.1.4 and earlier). The s parameter in forum search GET requests lacks length validation, enabling excessive query lengths that can cause performance degradation and potential DoS. The issue is fixed in version 2.2.0. CVSS v3.1 base score 7.5 (HIGH). Remediation...

7.5CVSS7.5AI score0.00619EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/04/18 3:50 p.m.49 views

CVE-2025-29784 NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to...

7.5CVSS0.00619EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/16 4:38 p.m.15 views

Security Bulletin: Multiple security vulnerabilities affect Go related packages shipped with IBM CICS TX Standard.

Summary Security vulnerabilities affect Go packages that are shipped with IBM CICS TX Standard. Go modules are used by IBM CICS TX Standard to simplify dependency management. It is possible for sensitive information to be exposed through data queries with an attacker causing an HTTP/2 endpoint to...

9.8CVSS7.3AI score0.91969EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2025/04/16 2:13 p.m.20 views

CVE-2025-22117 ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()

In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pktlen in icevcfdirparseraw Fix using the untrusted value of proto-raw.pktlen in function icevcfdirparseraw by verifying if it does not exceed the VIRTCHNLMAXSIZERAWPACKET value...

5.5CVSS6.1AI score0.00175EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.6 views

TOTOLINK A800R 安全漏洞

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK A800R suffers from a buffer overflow vulnerability that stems from downloadFile.cgi failing to properly validate the length size of the input data, no details of the vulnerability are provided at this time...

6.5CVSS7AI score0.00291EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/04/07 12:0 a.m.5 views

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CCC Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

9.8CVSS7.1AI score0.00707EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/01 10:6 p.m.79 views

CVE-2025-30356

CryptoLib (SDLS-EP) vulnerability CVE-2025-30356 affects 1.3.3 and earlier. A heap buffer overflow in Crypto_TC_ApplySecurity results from incomplete validation of the fl (frame length) field; after CVE-2025-29912’s underflow fix, frames can still produce a negative tf_payload_len that is treated...

9.8CVSS7.6AI score0.0062EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.9 views

PyTorch 缓冲区错误漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a buffer overflow vulnerability that stems from the failure of the function torch.nn.utils.rnn.unpacksequence to properly validate the length size of input data, which can be exploited by an attacker to execute arbitrary co...

5.3CVSS8.1AI score0.00185EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.4 views

PyTorch 缓冲区错误漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch has a buffer overflow vulnerability that stems from the failure of the function torch.lstmcell to properly validate the length size of the input data, which can be exploited by an attacker to execute arbitrary code on the system or caus...

5.3CVSS8.1AI score0.00183EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.8 views

PyTorch 缓冲区错误漏洞

PyTorch is a Python package open-sourced by PyTorch. PyTorch suffers from a buffer overflow vulnerability that stems from the failure of the function torch.nn.utils.rnn.padpackedsequence to properly validate the length size of input data, which can be exploited by an attacker to execute arbitrary...

5.3CVSS8.1AI score0.00185EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.6 views

NETGEAR WNR854T 安全漏洞

The NETGEAR WNR854T is a wireless router from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR WNR854T version 1.5.2, which is caused by the parsestheader function failing to properly validate the length of the input data, and can be exploited by a remote attacker to execute arbitra...

9.8CVSS8AI score0.00654EPSS
SaveExploits1References2
CNVD
CNVD
added 2025/03/27 12:0 a.m.6 views

HDF5 H5T__bit_copy function buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Tbitcopy function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

7.8CVSS7.2AI score0.00332EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/03/27 12:0 a.m.23 views

HDF5 H5Z__scaleoffset_decompress_one_byte function buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 has a buffer overflow vulnerability , the vulnerability stems from the H5Z scaleoffsetdecompressonebyte function fails to correctly validate the length of the input data size , an attacker can use this vulnerability to cause a denial of service...

7.8CVSS7.2AI score0.00373EPSS
SaveExploits1References1
Rows per page
Query Builder