Lucene search
+L

1438 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:56 a.m.13 views

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

9.8CVSS7.3AI score0.008EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:34 a.m.12 views

CVE-2024-41660

slpd-lite is a unicast SLP UDP server. Any OpenBMC system that includes the slpd-lite package is impacted. Installing this package is the default when building OpenBMC. Nefarious users can send slp packets to the BMC using UDP port 427 to cause memory overflow issues within the slpd-lite daemon o...

9.8CVSS9.5AI score0.00856EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/08 1:15 p.m.11 views

UBUNTU-CVE-2026-0719

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in...

8.6CVSS6.1AI score0.00566EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2026/01/07 12:00 a.m.5 views

UniFi Protect < 6.2.72 Multiple Vulnerabilities

UniFi Protect is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ui:unifiprotect"; ifdescripti...

8.8CVSS7.5AI score0.00421EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.11 views

EUVD-2023-60257

In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUG in ext4mbnewinodepa due to overflow When we calculate the end position of ext4freeextent, this position may be exactly where ext4lblkt i.e. uint overflows. For example, if acgex.felogical is 4294965248 and...

6AI score0.00206EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2025/12/24 9:01 a.m.11 views

webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash

A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to improper memory handling and result in an unexpected process crash...

4.3CVSS6AI score0.00755EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.9 views

PT-2025-53070

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's ALSA PCM memory allocation helpers. A missing lock during a sanity check allows a user to potentially allocate more memory than the predefined maximum...

6AI score0.00202EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/12/22 1:35 p.m.15 views

CVE-2025-14299

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and...

7.1CVSS6.8AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/20 1:16 a.m.21 views

CVE-2025-14299

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and...

6.5CVSS5.9AI score0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/20 12:42 a.m.38 views

CVE-2025-14299 Improper Content-Length Validation in HTTPS Requests on Tapo C200

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and...

7.1CVSS0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/20 12:42 a.m.33 views

CVE-2025-14299

CVE-2025-14299 affects TP-LINK Tapo C200 V3’s HTTPS server. The flaw is improper validation of the Content-Length header, which can trigger an integer overflow and cause excessive memory allocation, leading to a denial of service. An unauthenticated attacker on the same local network can craft HT...

7.1CVSS6.4AI score0.00246EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/12/19 12:00 a.m.13 views

The vulnerability of the qt/qtbase package from the Qt library, which allows a hacker to execute arbitrary code.

The vulnerability of the qt/qtbase library in Qt is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

4CVSS6.3AI score0.00225EPSS
SaveExploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:00 a.m.7 views

SUSE SLED15: libecpg6 / libecpg6-32bit / libpq5 / libpq5-32bit / postgresql / etc (SUSE-SU-2025:4363-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4363-1 advisory. Changes in postgresql18: - Fix build with uring for post SLE15 code streams. Update to 18.1:...

5.9CVSS7AI score0.0034EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:00 a.m.12 views

AlmaLinux 9 : kernel (ALSA-2025:22405)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:22405 advisory. kernel: nfsd: handle getclientlocked failure in nfsd4setclientidconfirm CVE-2025-38724 kernel: wifi: cfg80211: fix use-after-free in cmpbss CVE-2025-3986...

9.8CVSS6.9AI score0.00378EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/12/08 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2023-53752

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: deal with integer overflows in kmallocreserve Blamed commit changed: ptr = kmallocsize %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

7.8CVSS5.2AI score0.0014EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2025/12/04 10:25 a.m.13 views

Moderate: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

7.3CVSS7.4AI score0.00474EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/03 3:09 p.m.11 views

CLSA-2025-1764774571 gstreamer1: Fix of CVE-2024-47606

CVE-2024-47606: fix integer overflow when allocating sysmem and avoid integer overflow in qtdemux theora extension parsing...

9.8CVSS7.2AI score0.01355EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/12/03 12:00 a.m.7 views

The vulnerability of the scsi.c component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the scsi.c component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS6.9AI score0.00187EPSS
SaveExploits0References17Affected Software4
Tenable Nessus
Tenable Nessus
added 2025/11/24 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-9820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token label longer...

4CVSS6.1AI score0.00203EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/22 12:00 a.m.7 views

EulerOS 2.0 SP13 : glib2 (EulerOS-SA-2025-2444)

According to the versions of the glib2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib. An integer overflow during temporary file creation leads to an out-of-bounds memory access, allowing an attacker to...

3.7CVSS5.5AI score0.00397EPSS
SaveExploits0References2
Rows per page
Query Builder