Lucene search
K

5807 matches found

Cvelist
Cvelist
added 2026/05/04 6:10 p.m.44 views

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...

3.7CVSS0.0032EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/05/04 6:10 p.m.15 views

CVE-2026-43964

Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...

7.5CVSS6AI score0.0032EPSS
Exploits0References2
CVE
CVE
added 2026/05/04 4:43 p.m.6 views

CVE-2025-47406

CVE-2025-47406 is a DSP Service buffer over-read vulnerability where information disclosure can occur during processing of IOCTL handler callbacks without verifying the input buffer size. The NVD entries describe the issue as Information Disclosure with a CVSSv3.1 base score of 6.1 (Medium), with...

6.1CVSS5.9AI score0.00074EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/04 4:43 p.m.1 views

CVE-2025-47406 Buffer Over-read in DSP Service

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size...

6.1CVSS5.9AI score0.00074EPSS
Exploits0References1
CVE
CVE
added 2026/05/04 4:43 p.m.8 views

CVE-2025-47403

CVE-2025-47403 is a transient denial-of-service vulnerability in WLAN firmware related to processing a malformed Fast Transition (FT) response frame with an invalid header during wireless roaming. The issue affects the WLAN firmware component responsible for handling FT frames; the underlying cau...

7.5CVSS5.8AI score0.00216EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/04 4:43 p.m.4 views

CVE-2025-47403 Buffer Over-read in WLAN Firmware

Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming...

6.5CVSS5.8AI score0.00216EPSS
Exploits0References1
CVE
CVE
added 2026/05/04 4:43 p.m.7 views

CVE-2025-47401

CVE-2025-47401 indicates a transient denial of service caused by a buffer over-read in the WLAN HAL during channel configuration while processing target power rate tables. The description across sources confirms the issue and impact to availability, but no concrete exploitation details, affected ...

7.5CVSS5.8AI score0.00216EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/04 4:43 p.m.33 views

CVE-2025-47401 Buffer Over-read in WLAN HAL

Transient DOS when processing target power rate tables during channel configuration...

6.5CVSS0.00216EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/04 4:43 p.m.2 views

CVE-2025-47401 Buffer Over-read in WLAN HAL

Transient DOS when processing target power rate tables during channel configuration...

6.5CVSS5.8AI score0.00216EPSS
Exploits0References1
OSV
OSV
added 2026/05/04 1:16 p.m.1 views

ALPINE-CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.5CVSS5.8AI score0.00394EPSS
Exploits0References1
OSV
OSV
added 2026/05/04 1:16 p.m.1 views

DEBIAN-CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.5CVSS5.8AI score0.00394EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/04 12:54 p.m.4 views

CVE-2026-34032 Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

5.8AI score0.00393EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/04 12:39 p.m.6 views

CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

5.8AI score0.00394EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/04 12:39 p.m.2 views

EUVD-2026-26948

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.5CVSS5.8AI score0.00394EPSS
Exploits0References1
CVE
CVE
added 2026/05/04 12:39 p.m.105 views

CVE-2026-34059

CVE-2026-34059 affects Apache HTTP Server up to version 2.4.66, with a vulnerability in the mod_proxy_ajp component: a heap over-read in the ajp_parse_data() path that can lead to memory disclosure. The public description in multiple sources confirms the issue and the recommended mitigation is to...

7.5CVSS5.8AI score0.00394EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/05/04 12:39 p.m.4 views

CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.5CVSS5.8AI score0.00394EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/05/04 12:39 p.m.2 views

CVE-2026-34059

Buffer Over-read vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...

7.5CVSS5.8AI score0.00394EPSS
Exploits0
OSV
OSV
added 2026/05/04 8:34 a.m.3 views

CLSA-2026-1777883671 nginx: Fix of 2 CVEs

CVE-2026-27651: fix null pointer dereference in ngxmailauthhttpmodule when authentication retry is enabled with CRAM-MD5 or APOP - CVE-2026-32647: fix buffer over-read/write in ngxhttpmp4module when processing crafted mp4 files with empty stco/co64 atoms...

8.7CVSS6.1AI score0.00481EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.3 views

PT-2026-36908

Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9 Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text...

7.5CVSS6AI score0.0032EPSS
Exploits0References47
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.12 views

Apache 2.4.x < 2.4.67 Multiple Vulnerabilities

The version of Apache httpd installed on the remote host is prior to 2.4.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 2.4.67 advisory. - Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP...

9.8CVSS6AI score0.06759EPSS
Exploits17References11
Rows per page
Query Builder