Lucene search
+L

14464 matches found

Vulnrichment
Vulnrichment
•added 2026/01/19 7:32 p.m.•6 views

CVE-2026-1173 birkir prime GraphQL Array Based Query Batch graphql denial of service

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.2AI score0.00788EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/01/19 7:32 p.m.•23 views

EUVD-2026-3200

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

6.9CVSS5.2AI score0.00788EPSS
SaveExploits1References5
OSV
OSV
•added 2026/01/19 12:00 p.m.•18 views

RUSTSEC-2026-0080 Multiple soundness issues in `scaly` safe APIs

Affected versions contain multiple safe APIs that can trigger undefined behavior: - Array::index can perform an out-of-bounds read. - String::getlength can perform an out-of-bounds read. - String::appendcharacter can perform an invalid write. - String::tocstring can perform an out-of-bounds write...

5.9AI score
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/19 10:29 a.m.•24 views

CVE-2026-1145

A flaw was found in quickjs-ng quickjs. This vulnerability, a heap-based buffer overflow, exists in the jstypedarrayconstructorta function. A remote attacker can exploit this by sending specially crafted input, which could lead to unauthorized information disclosure or system instability denial o...

8.8CVSS7AI score0.00395EPSS
SaveExploits1References10
OSV
OSV
•added 2026/01/19 9:16 a.m.•13 views

DEBIAN-CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits1References1
NVD
NVD
•added 2026/01/19 9:16 a.m.•21 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS0.00395EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2026/01/19 8:02 a.m.•14 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits1References7Affected Software1
CVE
CVE
•added 2026/01/19 8:02 a.m.•75 views

CVE-2026-1145

CVE-2026-1145 affects quickjs-ng/quickjs up to version 0.11.0. The vulnerability resides in js_typed_array_constructor_ta in quickjs.c, enabling a heap-based buffer overflow that can be triggered remotely. Exploitation has been published; patch 53aebe66170d545bb6265906fe4324e4477de8b4 is availabl...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
•added 2026/01/19 8:02 a.m.•51 views

CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

7.5CVSS0.00395EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2026/01/19 8:02 a.m.•30 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits1References8
Vulnrichment
Vulnrichment
•added 2026/01/19 8:02 a.m.•9 views

CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

7.5CVSS6.6AI score0.00395EPSS
SaveExploits1References8
OSV
OSV
•added 2026/01/19 8:02 a.m.•12 views

CVE-2026-1145 quickjs-ng quickjs quickjs.c js_typed_array_constructor_ta heap-based overflow

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

5.3CVSS6.6AI score
SaveExploits0References10
Debian CVE
Debian CVE
•added 2026/01/19 8:02 a.m.•32 views

CVE-2026-1145

A flaw has been found in quickjs-ng quickjs up to 0.11.0. Affected by this vulnerability is the function jstypedarrayconstructorta of the file quickjs.c. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may ...

8.8CVSS6.6AI score0.00395EPSS
SaveExploits1
CNNVD
CNNVD
•added 2026/01/19 12:00 a.m.•25 views

QuickJS security vulnerabilities

QuickJS is a small and embeddable JavaScript engine developed by the QuickJS open-source project. Versions of QuickJS prior to 0.11.0 contain security vulnerabilities. These vulnerabilities stem from incorrect operations on the function jstypedarrayconstructorta in the file quickjs.c, which may...

8.8CVSS7.2AI score0.00395EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•13 views

PT-2026-3428

Name of the Vulnerable Software and Affected Versions quickjs-ng versions up to 0.11.0 Description A flaw exists in quickjs-ng quickjs due to a heap-based buffer overflow in the js typed array constructor ta function within the quickjs.c file. This manipulation allows for remote exploitation. An...

8.8CVSS6.5AI score0.00395EPSS
SaveExploits1References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•6 views

CVE-2026-1173: Improper Resource Shutdown or Release

A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made...

9.8CVSS5.2AI score0.00788EPSS
SaveExploits1References1
Redos
Redos
•added 2026/01/19 12:00 a.m.•21 views

ROS-20260119-7309

A vulnerability in the net/sched/schsfq.c component of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

7.8CVSS6.5AI score0.00275EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/01/19 12:00 a.m.•13 views

MiracleLinux 8 : postgresql:10 (AXSA:2021-2311:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2311:01 advisory. postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 postgresql: Memory disclosure in INSERT ... ON...

8.8CVSS7AI score0.0199EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/01/18 12:24 a.m.•17 views

SUSE CVE-2025-71143

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the...

5.5CVSS6.1AI score0.00144EPSS
SaveExploits0References10
OSV
OSV
•added 2026/01/17 3:42 p.m.•20 views

CLSA-2026-1768580474 php: Fix of CVE-2025-14178

CVE-2025-14178: fix integer overflow in arraymerge to prevent potential denial of service when merging arrays with total elements exceeding HTMAXSIZE...

8.2CVSS6.9AI score0.00459EPSS
SaveExploits1References1
Rows per page
Query Builder