Lucene search
+L

395924 matches found

Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106722

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM Load in load dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause...

8.5CVSS6.4AI score0.00148EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-106625

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel pcie: validate TX skb length in send sync btintel pcie prepare tx copies skb-len bytes into a fixed BTINTEL PCIE BUFFER SIZE 4096 DMA slot via an unchecked memcpy. Oversized packets are currently rejected only ...

5.9AI score0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•10 views

PT-2026-107124

Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID → CVE-2026-76746 Vendor → Unknown Severity → Critical — CVSS 9.3 Product → Unknown Date → 2026-10-06 A critical vulnerability Classic Buffer Overflow has been disclosed affecting Unknown. Patch...

9.3CVSS5.7AI score0.00199EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/06 12:00 a.m.•6 views

ALSA-2026:76781 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

9CVSS6AI score0.00297EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-76746: Buffer Copy without Checking Size of Input

An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and cause a denial of service on the affected device...

9.3CVSS6.1AI score0.00199EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•14 views

PT-2026-106838

Name of the Vulnerable Software and Affected Versions ImageSharp versions 3.0.0 through 4.1.0 Description Decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression allows the passing of attacker-expanded runs to BitWriterUtils.WriteBits without verifying the current row width...

7.5CVSS6.3AI score0.00425EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-107238

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists in the DirectDraw Surface DDS loader. When processing a specially crafted DDS image, the system uses 32-bit arithmetic to calculate buffer sizes based on widt...

7.8CVSS6.7AI score0.0015EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-107180

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists in the DICOM export plug-in. This occurs when exporting an image with extremely large width and height dimensions. The export process calculates the required...

6.3CVSS6.2AI score0.00119EPSS
SaveExploits0References5
Redos
Redos
•added 2026/10/06 12:00 a.m.•11 views

ROS-20261006-73-0211

The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer’s initial limit. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.0015EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-98206: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into responsebuf, which is CYMAXINPUT bytes...

5.9AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-106535

In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as the memcpy length into response buf, which is CY MAX INPUT bytes...

5.9AI score0.00175EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-106709

Name of the Vulnerable Software and Affected Versions GNU Aspell versions prior to 0.60.8.3 Description The prezip-bin utility contains a heap-based buffer overflow in the decompressor located in prog/prezip.c. The decompressor fails to properly validate buffer space, allowing a specially crafted...

1.8CVSS6.3AI score0.00138EPSS
SaveExploits0References12
Redos
Redos
•added 2026/10/06 12:00 a.m.•17 views

ROS-20261006-73-0407

The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...

7.8CVSS6.9AI score0.00197EPSS
SaveExploits0
Redos
Redos
•added 2026/10/06 12:00 a.m.•9 views

ROS-20261006-73-0247

The vulnerability in the arch/arm64/kernel/hibernate.c component of the Linux operating system relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00134EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•14 views

PT-2026-107119

Name of the Vulnerable Software and Affected Versions AOS-S affected versions not specified Description Buffer overflow vulnerabilities exist in the affected interface of AOS-S. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold...

6.5CVSS6.1AI score0.00391EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•8 views

CVE-2026-98184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiexcfg80211authenticate derives the authentication frame length from req-ielen and req-authdatalen, both of type sizet, but stores it in a u16. NL80211ATTRAUTHDATA...

6AI score0.00222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-25270: Out-of-bounds Write

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...

6.7CVSS6.2AI score0.00073EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Wireshark 1.8.x < 1.8.13 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.13 advisory. - Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x befo...

9.3CVSS7.6AI score0.47143EPSS
SaveExploits10References10
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-98272

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: mvpp2: prevent buffer overflow in pagepool allocation The perprocessor buffering scheme is supported only if the number of pools nrxqs 2 does not exceed...

6.2AI score0.00203EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/10/06 12:00 a.m.•12 views

RockyLinux 10 : freerdp (RLSA-2026:75570)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:75570 advisory. FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialized heap memory in Save Session Info PDU CVE-2026-85089 FreeRDP: FreeRDP: Denial ...

8.8CVSS7.6AI score0.00665EPSS
SaveExploits7References23
Rows per page
Query Builder