Lucene search
K

99 matches found

Redos
Redos
added 2026/05/29 12:0 a.m.10 views

ROS-20260529-73-0017

The vulnerability of the software for interacting with servers via CURL is related to the execution of operations within the acceptable data buffer limits. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.09917EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2026/02/04 4:7 p.m.3 views

CVE-2026-23069 vsock/virtio: fix potential underflow in virtio_transport_get_credit()

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix potential underflow in virtiotransportgetcredit The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer shrinks its advertise...

5.5AI score0.00127EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/26 12:0 a.m.4 views

PT-2025-48207

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.13 Suricata versions prior to 8.0.2 Description Suricata is a network IDS, IPS and NSM engine. Processing large buffers in Lua scripts before versions 7.0.13 and 8.0.2 can lead to a stack overflow. Users utilizin...

7.5CVSS6.7AI score0.00295EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/16 9:23 p.m.4 views

EUVD-2025-34836

Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the Lua filter. When a Lua script executing in the response phase rewrites a response body so that its size exceeds the configured...

6.5CVSS6.3AI score0.00383EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-9101

Malware in sbrugna...

4.6CVSS5.9AI score0.00246EPSS
Exploits0References10
NVD
NVD
added 2025/08/12 5:15 p.m.2 views

CVE-2025-20053

Improper buffer restrictions for some IntelR XeonR Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS0.00143EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/07 12:0 a.m.4 views

The vulnerability of the llcp_sock.c component in the Linux operating system’s kernel allows a hacker to cause service interruptions as well as trigger system failures.

The vulnerability of the llcpsock.c component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause service failures...

6.1CVSS6.8AI score0.0025EPSS
Exploits0References11Affected Software3
Veracode
Veracode
added 2025/05/28 5:10 a.m.6 views

Out-of-Bounds-Read

libassimp.so is vulnerable to out-of-bounds read. The vulnerability is due to improper input handling in the MDLImporter::InternReadFileQuake1 function of MDLLoader.cpp, which allows an attacker to read memory beyond buffer limits...

7.8CVSS6.7AI score0.00221EPSS
Exploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.5 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to reading data beyond the acceptable buffer limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.9AI score0.01135EPSS
Exploits0References9Affected Software5
Github Security Blog
Github Security Blog
added 2025/04/09 12:57 p.m.9 views

bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing

Impact The buffer created for parsing metadata for PNG and WebP images was only bounded by their input data type, which could lead to potentially large memory allocation, and unreasonably high for image metadata. Before v0.11.0, If you didn't trust the input images, this could be abused to...

6.9CVSS7AI score0.00152EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.5 views

The vulnerability of the C/C++ Libstb library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the C/C++ Libstb library lies in reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

5.3CVSS6.7AI score0.0056EPSS
Exploits0References10Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-19481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-cac1.c mishandles buffer limits for CAC certificates...

4.6CVSS6.3AI score0.00246EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.3 views

Intel Processors 缓冲区错误漏洞

Intel Processors are a family of processors from Intel Corporation USA. A buffer error vulnerability exists in Intel Processors that stems from the presence of incorrect buffer limits that could allow a privileged user to enable information disclosure via local access...

6.8CVSS5.9AI score0.00186EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.4 views

The vulnerability of the demuxer component in the FFmpeg multimedia library, which arises from reading data beyond the buffer’s acceptable limits, allows attackers to gain access to confidential data.

The vulnerability of the demuxer component in the FFmpeg multimedia library relates to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created ASF file...

7.8CVSS6.8AI score0.01763EPSS
Exploits0References7Affected Software2
Veracode
Veracode
added 2024/04/24 6:40 a.m.14 views

Out-of-bounds Read

libfreerdp.so is vulnerable to Out-of-bounds Read. The vulnerability is due to improper handling of nWidth and nHeight when both are zero, This allowing an attacker to potentially access or modify memory outside the intended buffer limits...

9.8CVSS9.6AI score0.01193EPSS
Exploits0References8Affected Software1
CNNVD
CNNVD
added 2024/02/14 12:0 a.m.4 views

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in Intel ThunderboltTM DCH drivers for Windows version 88, which arose from an improper buffer limit in the affected product. The vulnerability could allow an authenticate...

6.5CVSS6.3AI score0.00222EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.3 views

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

7.8CVSS6.7AI score0.00151EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.4 views

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

7.8CVSS6.7AI score0.00149EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.3 views

PT-2023-18421 · Intel +1 · Intel Qat Library +1

Name of the Vulnerable Software and Affected Versions: IntelR QAT Library versions prior to 22.07.1 Description: The issue is related to improper buffer restrictions, which may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versions pri...

2.3CVSS6.4AI score0.00215EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.3 views

The vulnerability of the decode_iptc_iim() function in the OpenImageIO image processing library allows a hacker to gain access to confidential data.

The vulnerability of the decodeiptciim function in the OpenImageIO image processing library is related to reading data from within the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created TIFF file...

5.3CVSS7AI score0.01169EPSS
Exploits1References9Affected Software4
Rows per page
Query Builder