922163 matches found
CVE-2026-75880
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An authenticated client could exploit this vulnerability by attaching a consumer with a selector containing crafted wildcard usage. This action leads to excessive evaluation during message delivery attempts, occupying a shared broker...
CVE-2021-41160
CVE-2021-41160 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client...
CVE-2026-85473
A flaw was found in auth0/java-jwt. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a JSON Web Token JWT containing an out-of-range timestamp claim. Because the issue occurs during token parsing before cryptographic signature verification, processing these malforme...
poc_CVE-2025-1716
pocCVE-2025-1716...
CVE-2026-119373
A flaw was found in SQLite. A heap-based buffer overflow exists in the Full-Text Search 5 FTS5 extension during the merging of prefix document lists. An attacker capable of inserting negative row identifiers into a configured table and executing a prefix search query can cause data to be written...
EUVD-2026-114008
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted serialized object. This vulnerability was...
CVE-2026-61627
The libass subtitle renderer (used in players like mpv , VLC , and FFmpeg ) contains a heap-buffer overflow in the wrap_lines_measure function. When rendering malicious ASS/SSA content, specifically lines ending with literal backslash-n sequences in certain wrap modes, the measurement loops can o...
CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...
EUVD-2026-114007
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...
CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...
CVE-2026-61627 libass: Out-of-bounds read and write in wrap_lines_measure
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...
CVE-2017-9430
i,am Gihad from Libya !! DNSTracer-1.8.1---Buffer-Overflow CVE-2017-9430 What Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a command line with a long name argument that is...
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
Summary joserfc.jwe.decryptjson, the library's public parser for JWE General JSON Serialization, accepts an attacker-controlled recipients array of unbounded length and performs one full private-key decryption operation decryptcek for every recipient present in the input, with no cap on recipient...
CVE-2026-61626 libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...
CVE-2026-61626
The libass subtitle renderer (versions 0.17.4 through 0.17.5 ) is vulnerable to an out-of-bounds bit clear because event pruning fails to guard negative Matroska ReadOrder values. An attacker can provide a malicious Matroska stream via ass_process_chunk with enabled read-order checking; subsequen...
EUVD-2026-114006
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...
CVE-2026-61626 libass: Out-of-bounds bit clears for negative Matroska ReadOrder values
libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. From 0.17.4 until 0.17.5, libass event pruning does not guard negative Matroska ReadOrder values, allowing an attacker to clear arbitrarily many bits to zero at attacker-controlled...
CVE-2023-24706
CVE-2022-24706 Apache CouchDB Remote Command Execution Vulnerability PoC...