Lucene search
+L

9461 matches found

Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.8 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.8 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.8 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.5 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/08/03 3:53 a.m.8 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the readPacket method of UserAttributeSubpacketInputStream, which reads a 5-octet subpacket length up to Integer.MAXVALUE and allocates new bytebodyLen-1 after checking only against a limit...

8.7CVSS5.5AI score0.00263EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/03 3:49 a.m.9 views

mariadb: Arbitrary shell command execution via improper sanitization in CONNECT engine

A flaw was found in MariaDB server. When the CONNECT engine is installed and REST support is enabled on Windows, a user can exploit improper sanitization of the table HTTP attribute. This attribute is interpolated into the curl command line, allowing for arbitrary shell command execution on the...

9.9CVSS5.8AI score0.01334EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/03 3:33 a.m.14 views

DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute

A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...

8.8CVSS6.7AI score0.00479EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/03 1:16 a.m.11 views

CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 1:16 a.m.6 views

DEBIAN-CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/03 1:16 a.m.6 views

UBUNTU-CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/03 12:44 a.m.64 views

CVE-2026-59649 OpenPGP user-attribute subpacket length bounded only by JVM max memory

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS0.00263EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/03 12:44 a.m.8 views

CVE-2026-59649 OpenPGP user-attribute subpacket length bounded only by JVM max memory

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/03 12:44 a.m.8 views

CVE-2026-59649 OpenPGP user-attribute subpacket length bounded only by JVM max memory

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score
SaveExploits0References9
CVE
CVE
added 2026/08/03 12:44 a.m.76 views

CVE-2026-59649

The CVE affects Bouncy Castle for Java: OpenPGP user-attribute subpacket length is currently bounded only by JVM max memory. Affected versions are before 1.85 (and LTS before 2.73.12) and BC-FJA before bcpg-fips 1.0.13 (1.0.x series), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). Practical impact, as state...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/03 12:44 a.m.9 views

EUVD-2026-52025

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/03 12:44 a.m.8 views

CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0References4Affected Software2
Debian CVE
Debian CVE
added 2026/08/03 12:44 a.m.11 views

CVE-2026-59649

In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X serie...

8.7CVSS5.4AI score0.00263EPSS
SaveExploits0
Rows per page
Query Builder