Lucene search
+L

7733 matches found

Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.18 views

PT-2026-5670

Memory Corruption when user space address is modified and passed to mem free API, causing kernel memory to be freed inadvertently...

7.8CVSS5.3AI score0.00097EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.18 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a resource management vulnerability, which stems from the modification of user-space addresses and their transmission to the memfree API. This can lead to the accidental release of kernel memory...

7.8CVSS5.8AI score0.00097EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2026/01/30 10:07 p.m.6 views

CVE-2020-37043

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

9.8CVSS6.6AI score0.00753EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 10:07 p.m.5 views

CVE-2020-37043 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

9.8CVSS6.8AI score0.00753EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/30 10:10 a.m.14 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS5.9AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/30 12:00 a.m.21 views

PT-2026-5483

Name of the Vulnerable Software and Affected Versions 10-Strike Bandwidth Monitor version 3.9 Description The software contains a buffer overflow issue that allows attackers to bypass SafeSEH, ASLR, and DEP protections. Exploitation occurs through crafted input sent to the application’s...

9.8CVSS6.7AI score0.00753EPSS
SaveExploits0References5
NVD
NVD
added 2026/01/29 9:16 a.m.21 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS0.00339EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/29 9:16 a.m.13 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS5.8AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.17 views

PT-2026-5256

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 26.1 Description An out-of-bounds read issue exists in the TeamViewer DEX Client formerly 1E Client - Content Distribution Service NomadBranch.exe on Windows. A crafted request can trigger this issue,...

7.5CVSS5.5AI score0.00339EPSS
SaveExploits0References7
OSV
OSV
added 2026/01/28 6:16 p.m.13 views

CVE-2020-36964

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

8.7CVSS6.1AI score0.00412EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/28 5:35 p.m.45 views

CVE-2020-36964 YATinyWinFTP - Denial of Service

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS0.00412EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/01/28 5:35 p.m.5 views

CVE-2020-36964

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/01/28 5:35 p.m.17 views

EUVD-2020-30885

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 5:35 p.m.8 views

CVE-2020-36964 YATinyWinFTP - Denial of Service

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/28 5:35 p.m.22 views

CVE-2020-36964

YATinyWinFTP is affected by a Denial of Service vulnerability. A remote attacker can crash the FTP service by connecting and sending a 272-byte buffer with a trailing space, which triggers a buffer overflow and service crash. Technical details indicate the issue is network-accessible with high CV...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/01/28 4:33 p.m.9 views

Malicious Package

Overview @awan7715/model-viewer-space-opera is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/28 4:33 p.m.12 views

Malicious Package

Overview model-viewer-space-opera is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/28 3:18 p.m.21 views

CVE-2025-41728

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially...

5.3CVSS5.8AI score0.00328EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/01/28 12:33 a.m.12 views

kernel: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGACMDMAXDATASIZE This data originates from userspace and is used in buffer offset calculations which could potentially overflow causing an out-of-bounds access...

7.8CVSS5.9AI score0.00237EPSS
SaveExploits0References5
NVD
NVD
added 2026/01/27 12:15 p.m.19 views

CVE-2025-41728

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially...

5.3CVSS0.00328EPSS
SaveExploits0References1
Rows per page
Query Builder