Lucene search
+L

98999 matches found

OSV
OSV
•added 2026/09/30 4:13 a.m.•12 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS6AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/09/30 4:13 a.m.•49 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/30 4:13 a.m.•10 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 4:13 a.m.•55 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 4:13 a.m.•113 views

CVE-2026-103111

The PCRE2 library, specifically versions prior to 10.49 , is vulnerable to an out-of-bounds write with arbitrary data. This flaw occurs when an application processes attacker-controlled regular expressions using specific Just-In-Time (JIT) compiler interfaces . A successful exploit could allow an...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/09/30 4:13 a.m.•22 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0
Mend
Mend
•added 2026/09/30 4:13 a.m.•7 views

CVE-2026-103111

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/30 4:13 a.m.•16 views

EUVD-2026-89608

PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an out-of-bounds write with arbitrary data...

7.6CVSS7.4AI score0.00214EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/30 3:10 a.m.•14 views

CVE-2026-71974

A flaw was found in U-Boot. The bootloader fails to properly validate image sizes against partition boundaries when reading Android boot partitions. An attacker with physical access to the device can exploit this vulnerability by connecting crafted boot media with oversized headers, causing an...

4.8CVSS6.1AI score0.00177EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/09/30 1:28 a.m.•16 views

kernel: dm log: fix out-of-bounds write due to region_count overflow

A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...

7.8CVSS7AI score0.0014EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/09/30 1:28 a.m.•14 views

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.8CVSS6.9AI score0.00718EPSS
SaveExploits1References15
RedHat Linux
RedHat Linux
•added 2026/09/30 1:28 a.m.•14 views

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

9.8CVSS6.3AI score0.00368EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•21 views

EUVD-2026-89432

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

4.8CVSS6.1AI score0.00177EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•22 views

EUVD-2026-89430

U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the videodisplayrle8bitmap function in drivers/video/videobmp.c. Attackers can supply a crafted RLE8-compressed BMP image to corrupt memory adjacent to the framebuffer and crash the bootloader...

6CVSS5.9AI score0.00221EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•16 views

EUVD-2026-89431

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfsreaddirectorytable function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablkscount value that causes heap buffer under-allocation and...

5.2CVSS6.2AI score0.00185EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/30 12:32 a.m.•19 views

EUVD-2026-89429

U-Boot before 2026.10-rc3 with CONFIGIPDEFRAG enabled contains an out-of-bounds write vulnerability in the netdefragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash the...

8.8CVSS5.9AI score0.00375EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•5 views

PT-2026-103441

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and denial of service...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•13 views

PT-2026-103298

Name of the Vulnerable Software and Affected Versions JCTables version 1.21.1 Description An unauthenticated SQL injection exists in the front-end CRUD API controller. The component fails to perform Joomla token validation and authentication checks on any task. Table names, column names, and valu...

10CVSS5.9AI score0.00451EPSS
SaveExploits1References16
CVE
CVE
•added 2026/09/30 12:00 a.m.•32 views

CVE-2026-51864

The DB-GPT software (versions 0.7.5 and 0.8.0 ) contains a directory traversal vulnerability in the python_file_upload function, specifically located at packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42. A remote attacker can exploit this flaw to write files outside the inte...

9.1CVSS6AI score0.00735EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•7 views

PT-2026-103359

🚨 CVE-2026-47503 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest VM user may cause an out-of-bounds write by sending a crafted RPC message with invalid performance state list size parameters. A successful exploit of this...

7.8CVSS5.9AI score0.00127EPSS
SaveExploits0References4
Rows per page
Query Builder