Lucene search
K

94 matches found

RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-37530

AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library. The senddiagnosticrequest function in uds.c allocates a 6-byte stack buffer MAXDIAGNOSTICPAYLOADSIZE=6 but copies up to 7 bytes MAXUDSREQUESTPAYLOADLENGTH=7 via memcpy at an offset of 1+pidlength 2-3...

7.5CVSS5.9AI score0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/05/27 4:7 a.m.9 views

USN-8313-1 xmlrpc-c vulnerabilities

It was discovered that Expat, vendored in XML-RPC, incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

9.8CVSS7.1AI score0.11027EPSS
Exploits0References3
CVE
CVE
added 2026/03/26 6:39 p.m.5 views

CVE-2026-33491

Zen C compiler before v0.4.4 is vulnerable to a stack-based buffer overflow in identifier mangling. A specially crafted Zen C source (.zc) with excessively long struct, function, or trait identifiers can cause a compiler crash or potentially allow arbitrary code execution. The issue affects Zen C...

7.8CVSS6.6AI score0.00008EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/26 10:17 p.m.3 views

CVE-2026-28207 Zen-C Vulnerable to Command Injection via Malicious Output Filename

Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability CWE-78 in the Zen C compiler allows local attackers to execute arbitrary shell commands by providing a specially crafted output filename via the -o...

6.6CVSS6.1AI score0.00015EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/26 10:17 p.m.20 views

CVE-2026-28207 Zen-C Vulnerable to Command Injection via Malicious Output Filename

Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability CWE-78 in the Zen C compiler allows local attackers to execute arbitrary shell commands by providing a specially crafted output filename via the -o...

6.6CVSS0.00015EPSS
Exploits1References1
Snyk
Snyk
added 2026/02/24 1:33 a.m.3 views

Missing Release of Resource after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6AI score0.00019EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/27 8:50 a.m.5 views

EUVD-2026-4763

Integer Overflow or Wraparound vulnerability in swoole swoole-src thirdparty/hiredis modules. This vulnerability is associated with program files sds.C. This issue affects swoole-src: before 6.0.2...

10CVSS5.9AI score0.00082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/24 9:19 p.m.3 views

CVE-2025-14935

NSF Unidata NetCDF-C Dimension Name Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.5AI score0.00027EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-14936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NSF Unidata NetCDF-C Attribute Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

7.8CVSS7.6AI score0.00027EPSS
Exploits0References3
OSV
OSV
added 2025/12/23 9:15 p.m.2 views

DEBIAN-CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS7.9AI score0.00027EPSS
Exploits0References1
OSV
OSV
added 2025/12/23 9:15 p.m.4 views

CVE-2025-14934

NSF Unidata NetCDF-C Variable Name Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target...

7.8CVSS6.3AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/23 9:9 p.m.24 views

CVE-2025-14933 NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability

NSF Unidata NetCDF-C NC Variable Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NSF Unidata NetCDF-C. User interaction is required to exploit this vulnerability in that the target must visit a...

7.8CVSS0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.4 views

NSF Unidata NetCDF-C 安全漏洞

NSF Unidata NetCDF-C is a tool for processing NetCDF files from NSF Unidata, USA. A security vulnerability exists in NSF Unidata NetCDF-C that stems from a lack of validation of the length of user-supplied data when parsing variable names, which could lead to a stack buffer overflow and remote co...

7.8CVSS8AI score0.00027EPSS
Exploits0References1
Redos
Redos
added 2025/11/12 12:0 a.m.2 views

ROS-20251112-05

Vulnerability in the t2.c component of the OpenJPEG image encoding and decoding library is related to an uncontrolled resource consumption. Exploitation of the vulnerability allows an attacker acting remotely cause a denial of service...

4.3CVSS4.9AI score0.00027EPSS
Exploits0
OSV
OSV
added 2025/11/07 6:15 p.m.2 views

CVE-2025-12829

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

6.9CVSS6.7AI score
Exploits0References3
EUVD
EUVD
added 2025/11/07 6:4 p.m.1 views

EUVD-2025-38328

An uninitialized stack read issue exists in Amazon Ion-C versions v1.1.4 that may allow a threat actor to craft data and serialize it to Ion text in such a way that sensitive data in memory could be exposed through UTF-8 escape sequences. To mitigate this issue, users should upgrade to version...

6.9CVSS6.2AI score0.00017EPSS
Exploits0References3
CVE
CVE
added 2025/11/07 6:4 p.m.9 views

CVE-2025-12829

An uninitialized stack read in Amazon Ion-C versions

6.9CVSS6.3AI score0.00017EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-13189

Malware in sbrugna...

7.5CVSS7.4AI score0.00378EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-0862

Malware in sbrugna...

5CVSS7.3AI score0.00624EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-19147

Malware in sbrugna...

9.8CVSS6.8AI score0.00173EPSS
Exploits1References4
Rows per page
Query Builder