Lucene search
+L

319268 matches found

EUVD
EUVD
added 2026/07/23 8:48 p.m.22 views

EUVD-2026-48430

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

9.2CVSS6.3AI score0.00369EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/07/23 8:32 p.m.7 views

EUVD-2026-48428

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...

8.7CVSS5.8AI score0.00267EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/07/23 8:32 p.m.33 views

CVE-2026-50039 Stack-based Buffer Overflow in MZ Automation libIEC61850

The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...

8.7CVSS0.00267EPSS
SaveExploits1References1
OSV
OSV
added 2026/07/23 7:48 p.m.8 views

GHSA-X2F5-4PRF-W687 Ruby json: JSON generator heap buffer overflow when streaming to an IO

Summary JSON.dumpobj, io and JSON::Stategenerateobj, io can write past the internal JSON generator buffer when a streamed object contains an attacker-controlled string near 16 KB. The issue is a heap out-of-bounds write in the IO-streaming path and is demonstrated as a reliable process crash /...

3.7CVSS6.3AI score0.00301EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/07/23 7:48 p.m.11 views

Ruby json: JSON generator heap buffer overflow when streaming to an IO

Summary JSON.dumpobj, io and JSON::Stategenerateobj, io can write past the internal JSON generator buffer when a streamed object contains an attacker-controlled string near 16 KB. The issue is a heap out-of-bounds write in the IO-streaming path and is demonstrated as a reliable process crash /...

3.7CVSS6.3AI score0.00301EPSS
SaveExploits0References6Affected Software1
SUSE Linux
SUSE Linux
added 2026/07/23 6:34 p.m.6 views

Security update for SVT-AV1, libyuv0, libaom3

This update for SVT-AV1, libyuv0, libaom3 fixes the following issues: CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash bsc1268650. CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrary...

8.1CVSS6.7AI score0.00511EPSS
SaveExploits0References20
OSV
OSV
added 2026/07/23 6:34 p.m.7 views

SUSE-SU-2026:3224-1 Security update for SVT-AV1, libyuv0, libaom3

This update for SVT-AV1, libyuv0, libaom3 fixes the following issues: - CVE-2026-56208: untrusted encoder configuration inputs can lead to a heap-based buffer overflow and a process crash bsc1268650. - CVE-2026-56209: crafted video frames with specific Y-plane pixel values can lead to an arbitrar...

7.6CVSS6.8AI score0.00511EPSS
SaveExploits0References11
OSV
OSV
added 2026/07/23 5:45 p.m.8 views

MGASA-2026-0290 Updated socat package fixes a security vulnerability

The updated package fixes a security vulnerability: Heap Buffer Overflow via SOCKS5 Reply Parser. CVE-2026-56123...

9.8CVSS5.3AI score0.00308EPSS
SaveExploits0References4
F5 Networks
F5 Networks
added 2026/07/23 2:19 p.m.27 views

K000162393: PostgreSQL vulnerability CVE-2026-6575

Security Advisory Description Buffer over-read in PostgreSQL function pgrestoreattributestats accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18,...

4.3CVSS5.1AI score0.00208EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/07/23 12:16 p.m.9 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS8.8AI score0.00454EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/23 12:16 p.m.9 views

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS7.8AI score0.00454EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/23 11:59 a.m.9 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS8.8AI score0.00454EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/23 11:59 a.m.7 views

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

8.8CVSS7.2AI score0.01006EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/23 11:41 a.m.6 views

PYSEC-2026-3496 Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service

Summary src/libImaging/Jpeg2KDecode.c:853 accumulates totalcomponentwidth across every tile in a JPEG2000 image instead of recomputing it per tile. That accumulated value is then used in the tilebytes calculation at src/libImaging/Jpeg2KDecode.c:868, which can make the decoder grow state-buffer v...

8.7CVSS5.4AI score0.00393EPSS
SaveExploits1References8
OSV
OSV
added 2026/07/23 11:41 a.m.9 views

PYSEC-2026-3495 Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

Summary PdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hin...

7.5CVSS5.8AI score0.00385EPSS
SaveExploits1References8
OSV
OSV
added 2026/07/23 11:41 a.m.6 views

PYSEC-2026-3498 PocketSphinx: Buffer overflows in language and acoustic model loading code

Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

6.9CVSS5.5AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/23 9:13 a.m.16 views

Important: Red Hat Security Advisory: libpq security update

An update for libpq is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.8CVSS7.8AI score0.00454EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/23 9:13 a.m.13 views

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

8.8CVSS8.8AI score0.00454EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2026/07/23 8:3 a.m.10 views

'dns-error-reporting: yes' leads to stack buffer overflow

...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0
OSV
OSV
added 2026/07/23 5:16 a.m.4 views

UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

6.8CVSS5.8AI score0.00107EPSS
SaveExploits0References3
Rows per page
Query Builder