Lucene search
+L

16261 matches found

osv_cve
osv_cve
•added 2026/09/22 12:00 a.m.•20 views

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

7.5CVSS6.1AI score
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/22 12:00 a.m.•18 views

CVE-2026-88345

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema ends with an unterminated quotation mark, the C-string scanning logic in lex dereferences the input pointer after it has reached the end of the buffer. A specially crafted...

7.5CVSS6.1AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•14 views

CVE-2026-88344: Improper Limitation of a Pathname to a Restricted Directory

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

7.5CVSS6.2AI score0.00405EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/21 12:00 a.m.•8 views

ROS-20260921-73-0107

The vulnerability in libusbx relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.0019EPSS
SaveExploits0
osv_opensuse
osv_opensuse
•added 2026/09/20 12:42 a.m.•10 views

OPENSUSE-SU-2026:21883-1 Security update for freeipmi

This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem bsc1278722. - CVE-2026-85506: Arbitrary code execution via...

9.8CVSS6.6AI score0.00405EPSS
SaveExploits0References12
osv_ubuntu
osv_ubuntu
•added 2026/09/18 9:17 p.m.•22 views

UBUNTU-CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

9.1CVSS6.2AI score0.00423EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2026/09/18 9:17 p.m.•21 views

CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

8.2CVSS6.2AI score0.00423EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2026/09/18 8:11 p.m.•27 views

CVE-2026-57228

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read one byte past a heap buffer when a quoted-printable escape sequence is split...

9.1CVSS6.2AI score0.00423EPSS
SaveExploits1
osv_bit
osv_bit
•added 2026/09/18 8:39 a.m.•25 views

BIT-DOTNET-SDK-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

8.8CVSS7.8AI score0.00771EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2026/09/18 8:39 a.m.•26 views

BIT-DOTNET-2025-36855 EOL .NET 6.0 Runtime Remote Code Execution Vulnerability

A vulnerability CVE-2025-21176 https://www.cve.org/CVERecord exists in DiaSymReader.dll due to buffer over-read. Per CWE-126: Buffer Over-read https://cwe.mitre.org/data/definitions/126.html , Buffer Over-read is when a product reads from a buffer using buffer access mechanisms such as indexes or...

8.8CVSS7.8AI score0.00771EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•17 views

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2026-3756)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a hea...

8.8CVSS7.2AI score0.04002EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•19 views

EulerOS Virtualization 2.12.0 : glib2 (EulerOS-SA-2026-3639)

According to the versions of the glib2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c fil...

9.1CVSS6.6AI score0.00774EPSS
SaveExploits7References8
BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•17 views

Tenda CH22 Router Code Execution

The vulnerability of the formWrlExtraSet /goform/WrlExtraSet function in the Tenda CH22 router microprogramming system lies in the reading of data outside the buffer in memory during the processing of the GO parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

9CVSS8.9AI score0.00887EPSS
SaveExploits1References6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/17 8:59 p.m.•37 views

Security Bulletin: IBM MQ for HPE NonStop is affected by vulnerabilities in OpenSSL

Summary IBM MQ for HPE NonStop is affected by OpenSSL vulnerabilities CVE-2026-34180, CVE-2026-34181, CVE-2026-34182, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-7383,...

9.1CVSS7.3AI score0.04002EPSS
SaveExploits0Affected Software1
SUSE CVE
SUSE CVE
•added 2026/09/17 4:42 p.m.•12 views

SUSE CVE-2026-89588

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length accounting after header In gheshandlearmhwerror, after skipping the cpersecprocarm header with err + 1, the remaining length was reduced by sizeoferr pointer size instead of sizeoferr...

5.5CVSS5.9AI score0.00185EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/17 4:38 p.m.•9 views

SUSE CVE-2026-89817

In the Linux kernel, the following vulnerability has been resolved: drm/gud: NUL-terminate TV mode names read from the device gudconnectoraddtvmode reads a buffer of fixed-size mode names from the USB device and passes pointers into it to drmmodecreatetvpropertieslegacy, which calls strlen on eac...

3.5CVSS6AI score0.00205EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/17 4:28 p.m.•15 views

SUSE CVE-2026-91959

FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rtsreadresult function within the RPC gateway transport parser. Attackers can send a malicious BINDACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...

6.5CVSS6.2AI score0.0038EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/09/17 4:11 a.m.•24 views

CVE-2026-25294 Buffer Over-read in WLAN Firmware

Transient DOS while parsing frame during channel usage...

7.4CVSS5.8AI score0.001EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 4:11 a.m.•49 views

CVE-2026-25294 Buffer Over-read in WLAN Firmware

Transient DOS while parsing frame during channel usage...

7.4CVSS0.001EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 4:11 a.m.•40 views

CVE-2026-25294

CVE-2026-25294 is a buffer over-read in Qualcomm WLAN Firmware that causes a transient denial of service while parsing a frame during channel usage. The adjacent-network attack vector (CVSS 3.1: 7.4 HIGH , AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates an attacker on an adjacent network can trigg...

7.4CVSS5.8AI score0.001EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder