Lucene search
+L

49 matches found

Mend
Mend
•added 2026/10/08 5:49 p.m.•7 views

CVE-2026-107376

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...

8.8CVSS5.9AI score0.00449EPSS
SaveExploits0References5
OSV
OSV
•added 2026/10/08 5:49 p.m.•7 views

CVE-2026-107376 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...

8.2CVSS6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/06/04 12:00 a.m.•51 views

PT-2026-46233

Name of the Vulnerable Software and Affected Versions API Platform Core versions 2.6.0 through 4.1.28 API Platform Core versions 4.2.0 through 4.2.25 API Platform Core versions 4.3.0 through 4.3.11 Description A missing isCacheKeySafe gate in the JSON:API and HAL item normalizers leads to a...

5.9CVSS5.7AI score0.00315EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/01/28 9:17 a.m.•35 views

CVE-2026-24814

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score0.00293EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/27 9:15 a.m.•21 views

CVE-2026-24814

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS0.00293EPSS
SaveExploits0References1
OSV
OSV
•added 2026/01/27 8:50 a.m.•18 views

CVE-2026-24814 A integer overflow in swoole/swoole-src

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/27 8:50 a.m.•46 views

CVE-2026-24814 A integer overflow in swoole/swoole-src

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS0.00293EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/27 8:50 a.m.•15 views

CVE-2026-24814

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score0.00293EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/27 8:50 a.m.•23 views

EUVD-2026-4763

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score0.00293EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/27 8:50 a.m.•58 views

CVE-2026-24814

CVE-2026-24814 is an Integer Overflow or Wraparound vulnerability in swoole-src (thirdparty/hiredis modules), associated with program files sds.C. Affected: swoole-src before 6.0.2. Root cause details and remediation are not specified in the provided documents; no exploit details are given. Monit...

10CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/27 8:50 a.m.•17 views

CVE-2026-24814 A integer overflow in swoole/swoole-src

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.8AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•27 views

swoole-src security vulnerabilities

swoole-src is an open-source PHP concurrency library based on coroutines, developed by the Swoole Project. Versions of swoole-src prior to 6.0.2 contained security vulnerabilities, which were caused by integer overflows or circular errors in the sds.C file...

10CVSS5.8AI score0.00293EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/27 12:00 a.m.•43 views

PT-2026-4889

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score0.00293EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/27 12:00 a.m.•6 views

CVE-2026-24814: Integer Overflow or Wraparound

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.8AI score0.00293EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2018-7380

Malware in sbrugna...

7.5CVSS7.3AI score0.02272EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2020-17010

Malware in sbrugna...

6.5CVSS6.5AI score0.0077EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-6504

Malware in sbrugna...

5.3CVSS6AI score0.02019EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/22 8:16 a.m.•14 views

CVE-2019-15518

Swoole before 4.2.13 allows directory traversal in swPorthttpstatichandler...

5.3CVSS7AI score0.02019EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/20 8:15 p.m.•22 views

CVE-2020-24275

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL...

6.5CVSS8.2AI score
SaveExploits0References4
NVD
NVD
•added 2023/07/20 8:15 p.m.•33 views

CVE-2020-24275

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL...

6.5CVSS6.8AI score0.0077EPSS
SaveExploits1References4
Rows per page
Query Builder