Lucene search
+L

329355 matches found

Redos
Redos
•added 2026/10/22 12:00 a.m.•11 views

ROS-20261022-73-0048

The vulnerability of the rabbitmq-c library is related to a heap buffer overflow when using the API function amqpsendframe for serializing the AMQPFRAMEBODY frame with an excessively large size. Exploiting this vulnerability allows a remote attacker to compromise the integrity, confidentiality, a...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•11 views

PT-2026-121590

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description Buffer overflow issues exist in the affected interface, which could allow an unauthenticated attacker to achieve remote code execution. Successful exploitation enables the execution of arbitra...

10CVSS8.1AI score0.00761EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•8 views

PT-2026-121630

Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow occurs in the command line interface, which may allow an unauthenticated remote attacker to execute arbitrary commands on the underlying host. This is possible if specific...

8.1CVSS8.3AI score0.00552EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•9 views

PT-2026-121586

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description Buffer overflow issues in the affected interface allow an unauthenticated attacker to achieve remote code execution by sending specially crafted packets. A successful attack enables the...

10CVSS7.7AI score0.00818EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•9 views

PT-2026-121679

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Microsoft Exchange Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to execute code over a network. A stack-based buffer...

7.5CVSS6.6AI score0.0054EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/22 12:00 a.m.•15 views

CVE-2026-78846

Multiple AiDot devices, specifically the AiDot Linkind Matter Smart Plug version 1.01.32 , are vulnerable to a heap-based buffer overflow . The flaw exists during the parsing of the SSDP location header . While the CVSS score indicates a CRITICAL severity (9.8) with high impact on confidentiality...

9.8CVSS6.2AI score0.00446EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/22 12:00 a.m.•9 views

EUVD-2026-108204

AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing...

5.9AI score0.00446EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•9 views

PT-2026-121737

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability...

8.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•8 views

PT-2026-121516

A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long credential value is supplied in the client's connection configuration. A party able to control that client-side...

5.7CVSS6.6AI score0.00166EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/10/22 12:00 a.m.•6 views

Bytecode Alliance wasmtime input validation error vulnerability

In versions prior to Bytecode Alliance Wasmtime 48.0.4, there is an input validation error vulnerability. This vulnerability stems from the failure to validate the type of results returned by asynchronous callbacks, leading to a stack buffer overflow. A malicious visitor can write approximately 1...

9.9CVSS6.2AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•9 views

PT-2026-121647

Name of the Vulnerable Software and Affected Versions AOS-10 affected versions not specified Description A buffer overflow occurs in the API of AOS-10, which may allow an authenticated adjacent attacker with high privileges to achieve remote code execution. A buffer overflow is a condition where ...

6.8CVSS8.3AI score0.00316EPSS
SaveExploits0References3
Redos
Redos
•added 2026/10/22 12:00 a.m.•11 views

ROS-20261022-73-0049

Vulnerability in the function railmain.c:railserverhandlemessages of the RDP client FreeRDP, related to buffer overflow, allowing an attacker to trigger a service failure...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/10/22 12:00 a.m.•8 views

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...

10CVSS8.6AI score0.00437EPSS
SaveExploits0References9Affected Software5
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•7 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142741)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142741 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctpassocaddpeer increments the association's 16-bit...

8.8CVSS6.5AI score0.01467EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•4 views

SUSE SLES12 Security Update : busybox (SUSE-SU-2026:4773-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4773-1 advisory. - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow whe...

7.5CVSS6.9AI score0.00351EPSS
SaveExploits0References22
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•18 views

SUSE SLED15 / SLES15 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2026:4764-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4764-1 advisory. - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap...

6.5AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/22 12:00 a.m.•13 views

PT-2026-121430

Name of the Vulnerable Software and Affected Versions EDK2 versions prior to edk2-stable202608 Description A critical buffer overflow flaw exists in the UEFI PXE network boot driver NetworkPkg/UefiPxeBcDxe. An unauthenticated attacker with local network access can send a specially crafted ICMP or...

9.5CVSS9AI score0.00635EPSS
SaveExploits5References36
BDU FSTEC
BDU FSTEC
•added 2026/10/22 12:00 a.m.•18 views

markdown-it Heap Buffer Overflow DoS

The vulnerability of the charCodeAt and slice functions in the markdown-it library is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.5AI score0.0055EPSS
SaveExploits0References6Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•3 views

AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1792626355)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792626355 advisory. - The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit...

7.5CVSS6.3AI score0.00571EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/22 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-96644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf...

8.1CVSS6.6AI score0.00384EPSS
SaveExploits0References3
Rows per page
Query Builder