Lucene search
+L

88 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/10 12:00 a.m.•0 views

CVE-2026-21069: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

7.8CVSS5.8AI score0.00155EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/07/14 6:48 p.m.•12 views

Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types in the prettyPrint process. An attacker can cause excessive CPU and memory consumption by providing specially crafted ASN.1 data with large exponents in encoded REAL values. Remediation Upgrade...

8.7CVSS7.3AI score0.00616EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/19 2:16 p.m.•29 views

CVE-2026-9143

There is an incorrect conversion between numeric types vulnerability in NI grpc-device due to missing range checks in CodeGen. This may silently discard high bits if a size value exceeded the target type's range. This affects NI grpc-device 2.17.0 and prior versions...

6.3CVSS0.00301EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/19 1:48 p.m.•54 views

CVE-2026-9143

CVE-2026-9143 describes an incorrect conversion between numeric types in NI grpc-device due to missing range checks in CodeGen, potentially discarding high bits when a size value exceeds the target type’s range. Affected: NI grpc-device ≤ 2.17.0. Metrics: CVSSv3.1 base 3.7 (LOW); CVSSv4.0 base 6....

6.3CVSS5.8AI score0.00301EPSS
SaveExploits0References2Affected Software1
Amazon
Amazon
•added 2026/06/08 12:00 a.m.•22 views

Important: nvidia-xconfig

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

8.8CVSS6AI score0.00221EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/26 5:14 p.m.•55 views

CVE-2026-24192

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, da...

7.8CVSS0.00206EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/26 5:14 p.m.•31 views

EUVD-2026-31920

NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause an incorrect conversion between numeric types, leading to a heap buffer overflow. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, da...

7.8CVSS6.2AI score0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•52 views

PT-2026-43335

Name of the Vulnerable Software and Affected Versions NVIDIA Display Driver for Linux affected versions not specified Description An issue exists where an attacker could cause an incorrect conversion between numeric types, resulting in a heap buffer overflow. A heap buffer overflow occurs when a...

7.8CVSS5.9AI score0.00206EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•2 views

CVE-2026-34548: Incorrect Conversion between Numeric Types

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, there is an Undefined Behavior UB condition in the XML conversion tooling path iccToXml caused by an implicit conversion from a negative signed integer to icUInt32Number unsigned...

6.2CVSS5.7AI score0.00174EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/23 6:30 a.m.•19 views

EUVD-2026-14379

Versions of the package jsrsasign before 11.1.1 are vulnerable to Incorrect Conversion between Numeric Types due to handling negative exponents in ext/jsbn2.js. An attacker can force the computation of incorrect modular inverses and break signature verification by calling modPow with a negative...

8.7CVSS5.8AI score0.00877EPSS
SaveExploits1References5
Snyk
Snyk
•added 2025/09/09 7:44 p.m.•2 views

Incorrect Conversion between Numeric Types

Overview Affected versions of this package are vulnerable to Incorrect Conversion between Numeric Types via the TTL function, which casts the 64-bit etcd lease ID to a uint32 and uses it as the TTL. An attacker can cause prolonged caching of DNS records and disrupt DNS resolution by supplying lar...

7.1CVSS6.8AI score0.00414EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2025/09/04 3:56 a.m.•14 views

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

...

7.5CVSS9.1AI score0.00672EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•0 views

CVE-2025-53733: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...

8.4CVSS5.9AI score0.00546EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2024-1552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. Th...

7.5CVSS6.8AI score0.00672EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•12 views

PT-2025-10810 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to an incorrect conversion between numeric types in the Windows Common Log File System Driver, which allows an authorized attacker to...

7.8CVSS8.2AI score0.00533EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2024/11/29 6:20 p.m.•16 views

WordPress Wallet for WooCommerce plugin <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types vulnerability

Authenticated Subscriber+ Incorrect Conversion between Numeric Types vulnerability discovered by stealthcopter in WordPress Plugin TeraWallet – For WooCommerce versions = 1.5.6...

6.5CVSS7AI score0.00496EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/28 1:15 p.m.•17 views

CVE-2024-7747

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS7.3AI score0.00496EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/11/28 12:54 p.m.•13 views

CVE-2024-7747 Wallet for WooCommerce <= 1.5.6 - Authenticated (Subscriber+) Incorrect Conversion between Numeric Types

The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versions up to, and including, 1.5.6. This is due to a numerical logic flaw when transferring funds to another user. This makes it possible for authenticated attackers, with...

6.5CVSS6.5AI score0.00496EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/28 12:54 p.m.•75 views

CVE-2024-7747

CVE-2024-7747 affects Wallet for WooCommerce (WordPress). The vulnerability is an incorrect conversion between numeric types in all versions up to and including 1.5.6, caused by a numerical logic flaw during transfers. When exploited by an authenticated user with Subscriber+ privileges, an attack...

6.5CVSS6.2AI score0.00496EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•4 views

CVE-2022-40225: Incorrect Conversion between Numeric Types

A vulnerability has been identified in SIPLUS TIM 1531 IRC 6AG1543-1MX00-7XE0 All versions V2.4.8, TIM 1531 IRC 6GK7543-1MX00-0XE0 All versions V2.4.8. Casting an internal value could lead to floating point exception under certain circumstances. This could allow an attacker to cause a denial of...

7.5CVSS5.6AI score0.00622EPSS
SaveExploits0References2
Rows per page
Query Builder