Lucene search
+L

5103 matches found

CVE
CVE
added 2026/02/11 8:37 p.m.22 views

CVE-2020-37196

CVE-2020-37196 affects Dnss Domain Name Search Software. It describes a denial-of-service condition where an oversized registration key can crash the application; a 1000-character payload pasted into the registration key field triggers the crash. The provided metrics indicate medium (CVSS v4.0) a...

7.5CVSS5.8AI score0.00458EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/11 7:44 p.m.6 views

CVE-2026-1848

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS5.5AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/11 1:15 p.m.17 views

CVE-2025-48724

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and...

8.1CVSS0.00393EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/11 12:19 p.m.33 views

CVE-2025-48724 Qsync Central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and...

2.3CVSS0.00393EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/11 12:18 p.m.6 views

CVE-2025-52870 Qsync Central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 2026/01/20 and...

2.3CVSS5.9AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.22 views

PT-2026-7710

Name of the Vulnerable Software and Affected Versions SpotMSN version 2.4.6 Description A denial of service issue exists in the registration name input field. An attacker can cause the application to crash by submitting a 1000-character payload into the Name field. Recommendations At the moment,...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.10 views

PT-2026-7685

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS5.8AI score0.0041EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.17 views

QNAP Systems File Station 5 缓冲区错误漏洞

QNAP Systems File Station 5 is a file management system developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems File Station 5 prior to 5.0.0.4 had a buffer error vulnerability. This vulnerability was caused by a buffer overflow, which could lead to memory...

8.1CVSS6AI score0.00567EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/11 12:00 a.m.19 views

QNAP Qsync Central 安全漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a security vulnerability caused by a buffer overflow. This vulnerability could allow remote attackers to modify memory o...

8.1CVSS6.2AI score0.00393EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.12 views

PT-2026-7692

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash...

7.5CVSS5.5AI score0.0033EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.12 views

PT-2026-7747

Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 visionOS versions prior to 26.3 Safari versions prior to 26.3 Description The software contains a flaw due to improper state management. Processing...

6.5CVSS5.8AI score0.00572EPSS
SaveExploits0References156
Positive Technologies
Positive Technologies
added 2026/02/11 12:00 a.m.17 views

PT-2026-7696

Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application...

7.5CVSS5.8AI score0.0041EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/10 7:15 p.m.13 views

CVE-2026-1848

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS0.00273EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/02/10 7:15 p.m.10 views

CVE-2026-1848

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS5.8AI score0.00273EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/10 7:15 p.m.17 views

UBUNTU-CVE-2026-1848

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS5.8AI score0.00273EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/10 6:22 p.m.8 views

CVE-2026-1848

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS5.5AI score0.00273EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/10 6:22 p.m.4 views

CVE-2026-1848 Connections received from the proxy port may not count towards total accepted connections

Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number of connections exceeds available resources. This only applies to connections accepted from the proxy port, pending the proxy protocol header...

8.2CVSS5.5AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/10 6:22 p.m.81 views

CVE-2026-1848

CVE-2026-1848 affects a MongoDB component where connections received via the proxy port are not counted toward the total accepted connections while the proxy protocol header is pending. This can allow the server to reach resource limits, potentially causing crashes when the total connections exce...

8.2CVSS5.5AI score0.00273EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/10 1:23 p.m.10 views

CVE-2026-22903

An unauthenticated remote attacker can send a crafted HTTP request containing an overly long SESSIONID cookie. This can trigger a stack buffer overflow in the modified lighttpd server, causing it to crash and potentially enabling remote code execution due to missing stack protections...

9.8CVSS6.7AI score0.00679EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.17 views

MongoDB Server 安全漏洞

MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, where connections received...

8.2CVSS5.8AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder