Lucene search
+L

4491 matches found

RedhatCVE
RedhatCVE
added 2026/06/25 11:43 p.m.20 views

CVE-2026-54679

A flaw was found in jq, a command-line JSON processor. On 32-bit systems, a local attacker could exploit an integer overflow vulnerability in the jvpstringappend function. This could lead to a massive buffer overrun, resulting in a denial of service DoS condition. Mitigation Mitigation for this...

6.9CVSS5.8AI score0.00103EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2026/06/25 10:17 p.m.13 views

CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer...

7.5CVSS6.1AI score0.00294EPSS
SaveExploits0References4
OSV
OSV
added 2026/06/25 9:16 p.m.11 views

DEBIAN-CVE-2026-6681

The PKCS7 decode path ignores the caller-supplied output buffer size outputSz, allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release...

5.3CVSS5.9AI score0.00376EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/25 6:17 p.m.21 views

CVE-2026-53016

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

7.8CVSS6.1AI score0.0014EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/25 6:16 p.m.28 views

CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 6:16 p.m.6 views

ALPINE-CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

5.5CVSS6AI score0.00103EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/25 6:16 p.m.15 views

CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS6.2AI score0.00103EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/25 5:16 p.m.10 views

CVE-2026-54679 jq: potential integer overflow in jvp_string_append

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/06/25 5:16 p.m.35 views

CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/25 5:16 p.m.78 views

CVE-2026-54679

CVE-2026-54679 affects the jq tool prior to version 1.8.2 on 32-bit systems. The vulnerability is in jvp_string_append where an integer overflow could trigger a massive buffer overrun, with a local attack vector and potential high impact on availability as described in the CVE. The issue is fixed...

6.9CVSS6AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/06/25 5:16 p.m.62 views

CVE-2026-54679 jq: potential integer overflow in jvp_string_append

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 5:16 p.m.14 views

CVE-2026-54679 jq: potential integer overflow in jvp_string_append

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

6.9CVSS6.1AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/25 3:16 p.m.16 views

jq: jq: Denial of Service via integer overflow and buffer overrun on 32-bit systems

A flaw was found in jq, a command-line JSON processor. On 32-bit systems, a local attacker could exploit an integer overflow vulnerability in the jvpstringappend function. This could lead to a massive buffer overrun, resulting in a denial of service DoS condition...

6.9CVSS6.1AI score0.00103EPSS
SaveExploits0References5
NVD
NVD
added 2026/06/25 9:16 a.m.18 views

CVE-2026-53209

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

7.8CVSS0.00129EPSS
SaveExploits0References6
OSV
OSV
added 2026/06/25 9:16 a.m.20 views

UBUNTU-CVE-2026-53209

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

7.8CVSS5.9AI score0.00129EPSS
SaveExploits0References19
Cvelist
Cvelist
added 2026/06/25 8:39 a.m.49 views

CVE-2026-53209 Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

7.8CVSS0.00129EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/06/25 8:39 a.m.19 views

EUVD-2026-39300

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

6AI score0.00129EPSS
SaveExploits0References6
attackerkb
attackerkb
added 2026/06/25 8:39 a.m.14 views

CVE-2026-53209

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: reject oversized Broadcast Announcement prepend Existing advertising instances can already hold the maximum extended advertising payload. When hciadvbcastannoucement prepends the Broadcast Announcement service...

6AI score0.00129EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/25 12:00 a.m.17 views

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

7.1CVSS5.9AI score0.00126EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/06/25 12:00 a.m.20 views

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.3AI score0.00126EPSS
SaveExploits0References11Affected Software3
Rows per page
Query Builder