Lucene search
+L

554009 matches found

OSV
OSV
added 4 days ago5 views

UBUNTU-CVE-2026-68137

In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25killbyneigh x25killbyneigh walks the global X.25 socket list looking for sockets attached to a terminating neighbour. x25listlock protects list membership while the lookup is in progress, but it...

9.8CVSS5.4AI score0.00175EPSS
SaveExploits0References7
NVD
NVD
added 4 days ago5 views

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS0.00131EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago3 views

UBUNTU-CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.7AI score0.00131EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 4 days ago8 views

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.6AI score0.00131EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago35 views

CVE-2026-18370

The CVE-2026-18370 entry details a heap-based buffer overflow in the entr utility, triggered in run_utility(). The code allocates a heap buffer via malloc(ARG_MAX) and copies command-line arguments into it, advancing the destination using the return value of strlcpy() (which reports the source le...

4.8CVSS5.7AI score0.00131EPSS
SaveExploits0References3
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS0.00131EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago5 views

CVE-2026-18370 Heap-based buffer overflow in entr

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.7AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 4 days ago6 views

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.6AI score0.00131EPSS
SaveExploits0References4
EUVD
EUVD
added 4 days ago9 views

EUVD-2026-55623

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

4.8CVSS5.7AI score0.00131EPSS
SaveExploits0References3
OSV
OSV
added 4 days ago8 views

SUSE-SU-2026:3541-1 Security update for libssh2_org

This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...

9.1CVSS6.4AI score0.0103EPSS
SaveExploits0References17
SUSE Linux
SUSE Linux
added 4 days ago11 views

Security update for libssh2_org

This update for libssh2org fixes the following issues: CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. CVE-2026-58050: heap buffer overflow d...

9.2CVSS7.5AI score0.0103EPSS
SaveExploits0References32
RedhatCVE
RedhatCVE
added 4 days ago6 views

CVE-2026-58042

A denial of service DoS vulnerability in Node.js allows a remote attacker to crash the application. By sending a specially crafted DNS response with an excessive number of 'A' records, an attacker can cause the dns.resolveAny function to unexpectedly abort the process. Mitigation If unused, avoid...

5.9CVSS6.3AI score0.0046EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago7 views

Security Bulletin:Vulnerability in OpenSSL affects IBM Netezza Appliance

Summary The OpenSSL package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVECVE-2026-45445 Vulnerability Details CVEID:CVE-2026-45445 DESCRIPTION: Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface,...

7.5CVSS5.6AI score0.00603EPSS
SaveExploits0Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 4 days ago9 views

Malicious code in xerohub-discord-voice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a9835e5102552e4f3787b7a957edd56441057093ee78e4da0acf48bc18bd32 xerohub-discord-voice advertises a startVoiceJoinerconfig API for joining a Discord voice channel, but its sendTokenToCreator function silently POSTs...

5.4AI score
SaveExploits0References2
OSV
OSV
added 4 days ago6 views

MAL-2026-13708 Malicious code in xerohub-discord-voice (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1a9835e5102552e4f3787b7a957edd56441057093ee78e4da0acf48bc18bd32 xerohub-discord-voice advertises a startVoiceJoinerconfig API for joining a Discord voice channel, but its sendTokenToCreator function silently POSTs...

5.5AI score
SaveExploits0References2
OSV
OSV
added 4 days ago5 views

MAL-2026-13706 Malicious code in neverthrow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b58633ada4ac777e5a404d3fa38bc1e664cb4696ccffcfd010a9552b1605cbd Package [email protected] is a typosquat of the legitimate neverthrow library. package.json declares postinstall: node./dist/install.js, which runs...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 4 days ago8 views

Malicious code in neverthrow-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b58633ada4ac777e5a404d3fa38bc1e664cb4696ccffcfd010a9552b1605cbd Package [email protected] is a typosquat of the legitimate neverthrow library. package.json declares postinstall: node./dist/install.js, which runs...

5.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 4 days ago8 views

Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

5.6AI score
SaveExploits0References5
OSV
OSV
added 4 days ago6 views

MAL-2026-13704 Malicious code in chai-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61869c26ad8015b88350d312fa37f5e18d536794ce5d8c46bf4239b2154b1a9 chai-tracker mimics chai-spies matching name, README, and keywords but declares peerDependencies on dbconnectify pinned to 'latest' and axios. The...

5.7AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 4 days ago4 views

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

3.7CVSS7.1AI score0.00306EPSS
SaveExploits0References4
Rows per page
Query Builder