Lucene search
K

10810 matches found

Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.4 views

PT-2026-2632

Name of the Vulnerable Software and Affected Versions Metricbeat affected versions not specified Description The software contains flaws related to improper validation of array indices and improper input validation. These issues can be exploited through specially crafted, malformed payloads sent ...

9.9CVSS6.9AI score0.07313EPSS
Exploits68References136
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-71100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cutxfilldesc TID getting from...

7.8CVSS5.8AI score0.00022EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/13 12:0 a.m.2 views

MiracleLinux 8 : java-17-openjdk-17.0.14.0.7-3.el8 (AXSA:2025-9605:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9605:04 advisory. JDK: Enhance array handling CVE-2025-21502 Bug Fixes: The Asianux OpenJDK packages rely on the copy-jdk-configs package to transfer configuration files to a...

4.8CVSS6.5AI score0.002EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.2 views

Elastic Metricbeat 安全漏洞

Elastic Metricbeat is a metrics collector from the Dutch company Elastic. A security vulnerability exists in Elastic Metricbeat that stems from improper array index validation and insufficient input validation, which could lead to a denial of service by an attacker via specially crafted malformed...

7.5CVSS7.3AI score0.00107EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of the wrong array index in rosekillbydevice, which could lead to an out-of-bounds read...

7.8CVSS7.1AI score0.00023EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.4 views

PT-2026-2617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the RDMA/core component related to the handling of netlink responses for RDMA NL LS OP IP RESOLVE queries. Specifically, the code does not correct...

5.5CVSS5.5AI score0.00033EPSS
Exploits0
Redos
Redos
added 2026/01/12 12:0 a.m.4 views

ROS-20260112-7307

A vulnerability in the smuv130updatepcieparameters function of the drivers/gpu/drm/amd/pm/swsmu/smu13/smuv130.c module, a driver to support the Direct Rendering Infrastructure DRI of AMD graphics cards in the Linux operating system kernel, is related to unchecked array indexing. Exploitation of t...

7.8CVSS6.5AI score0.00016EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/12 12:0 a.m.2 views

TencentOS Server 4: grafana (TSSA-2026:0007)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0007 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.3CVSS6.4AI score0.0004EPSS
Exploits1References2
OSV
OSV
added 2026/01/11 5:15 p.m.1 views

OPENSUSE-SU-2026:20022-1 Security update for matio

This update for matio fixes the following issues: - update to version 1.5.29: Fix printing rank-1-variable in MatVarPrint Fix array index out of bounds in MatVarPrint when printing UTF-8 character data boo1239678, CVE-2025-2337 Fix heap-based buffer overflow in strdupvprintf boo1239677,...

8.1CVSS6.8AI score0.00102EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2026/01/11 7:33 a.m.3 views

CVE-2026-0822

A flaw was found in quickjs-ng. A remote attacker could exploit a heap-based buffer overflow vulnerability by manipulating the jstypedarraysort function in quickjs.c. This could lead to information disclosure, denial of service, or potentially arbitrary code execution. An exploit for this...

8.8CVSS6.8AI score0.00081EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2026/01/11 7:33 a.m.3 views

CVE-2026-0821

A flaw was found in quickjs-ng. A remote attacker can exploit a heap-based buffer overflow vulnerability in the jstypedarrayconstructor function of the quickjs.c file by executing a specially crafted manipulation. This vulnerability may lead to information disclosure, denial of service, or...

9.8CVSS7.4AI score0.00173EPSS
Exploits1References10
OSV
OSV
added 2026/01/10 2:15 p.m.3 views

CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS6.5AI score
Exploits0References8
NVD
NVD
added 2026/01/10 2:15 p.m.2 views

CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS0.00081EPSS
Exploits1References8
OSV
OSV
added 2026/01/10 2:15 p.m.3 views

DEBIAN-CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS6.1AI score0.00081EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/01/10 2:15 p.m.1 views

CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS6.7AI score0.00081EPSS
Exploits1References6
OSV
OSV
added 2026/01/10 2:15 p.m.0 views

UBUNTU-CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS5.5AI score0.00081EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2026/01/10 1:32 p.m.3 views

CVE-2026-0822 quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

7.5CVSS6.8AI score0.00081EPSS
Exploits1References8
CVE
CVE
added 2026/01/10 1:32 p.m.25 views

CVE-2026-0822

CVE-2026-0822 affects quickjs-ng quickjs up to 0.11.0. The issue targets the js_typed_array_sort function in quickjs.c, causing a heap-based buffer overflow. It is remotely exploitable and exploits are publicly available. Patch reference: 53eefbcd695165a3bd8c584813b472cb4a69fbf5. Remediation: app...

8.8CVSS6.8AI score0.00081EPSS
Exploits1References8Affected Software1
Debian CVE
Debian CVE
added 2026/01/10 1:32 p.m.6 views

CVE-2026-0822

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

8.8CVSS6.1AI score0.00081EPSS
Exploits1
EUVD
EUVD
added 2026/01/10 1:32 p.m.1 views

EUVD-2026-1846

A vulnerability was identified in quickjs-ng quickjs up to 0.11.0. This issue affects the function jstypedarraysort of the file quickjs.c. The manipulation leads to heap-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The...

7.5CVSS6.4AI score0.00081EPSS
Exploits1References8
Rows per page
Query Builder