Lucene search
+L

660 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/28 12:00 a.m.•20 views

Linux driver module Buffer Overflow

The vulnerability in the drivers/infiniband/hw/bnxtre/hwcounters.h file of the Linux operating system is related to a violation of the data format agreement. Exploiting this vulnerability allows an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of...

9CVSS7.9AI score0.00134EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•18 views

Malicious Package

Overview data-format-helper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.4AI score
SaveExploits0References2
osv_debian
osv_debian
•added 2026/07/27 4:17 p.m.•14 views

DEBIAN-CVE-2026-17572

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

5.5CVSS6.3AI score0.00141EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/07/27 4:17 p.m.•24 views

UBUNTU-CVE-2026-17573

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...

6.7CVSS6AI score0.00151EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2026/07/27 3:12 p.m.•22 views

CVE-2026-17574 NULL Pointer Dereference in HDF5 via Invalid Variable-Length Datatype Type Tag

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read...

6.7CVSS5.7AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/27 3:12 p.m.•30 views

CVE-2026-17574

HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read...

6.7CVSS5.6AI score0.00148EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/07/27 3:11 p.m.•55 views

CVE-2026-17573 Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...

6.7CVSS0.00151EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/07/27 3:11 p.m.•15 views

CVE-2026-17573 Double Free in H5D__chunk_copy() in HDF5 via a Crafted Chunk-Index Size Field

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...

6.7CVSS6AI score0.00151EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/07/27 3:11 p.m.•20 views

CVE-2026-17573

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...

6.7CVSS6AI score0.00151EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2026/07/27 3:11 p.m.•24 views

CVE-2026-17573

A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size field via h5repack may cause the application to abort due to a double free...

6.7CVSS6AI score0.00151EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/07/27 3:11 p.m.•55 views

CVE-2026-17572 HDF5 SOHM List Index Heap Buffer Overflow

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

8.2CVSS0.00141EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/27 3:11 p.m.•21 views

CVE-2026-17572

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

8.2CVSS6.3AI score0.00141EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/07/27 3:11 p.m.•22 views

CVE-2026-17572 HDF5 SOHM List Index Heap Buffer Overflow

Heap-based buffer overflow in the SOHM list-index deserialization code in HDF5 through 2.1.1 on all platforms allows attackers to cause a denial of service crash via a crafted HDF5 file whose shared-message list index declares a nummessages count exceeding listmax, triggering out-of-bounds heap...

8.2CVSS6.2AI score
SaveExploits0References3
CVE
CVE
•added 2026/07/27 3:11 p.m.•85 views

CVE-2026-17572

CVE-2026-17572 : In HDF5 (vulnerable through 2.1.1), the SOHM list-index deserialization code is vulnerable to a heap-based buffer overflow. A crafted HDF5 file whose shared-message list index declares a num_messages greater than list_max can trigger out-of-bounds heap reads/writes in H5SM__cache...

8.2CVSS6.3AI score0.00141EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•25 views

PT-2026-64977

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A NULL pointer dereference occurs when processing a specially crafted HDF5 file. The issue is triggered when the application reads an attribute containing an invalid variable-length datatype typ...

8.2CVSS5.6AI score0.00151EPSS
SaveExploits1References22
Positive Technologies
Positive Technologies
•added 2026/07/27 12:00 a.m.•30 views

PT-2026-64976

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A double free issue exists in the HDF5 library. A double free occurs when the h5repack utility processes a specially crafted HDF5 file that contains an oversized chunk size field. This flaw is...

6.7CVSS6AI score0.00151EPSS
SaveExploits1References22
Fedora
Fedora
•added 2026/07/23 1:21 a.m.•21 views

[SECURITY] Fedora 44 Update: perl-YAML-Syck-1.47-1.fc44

This module provides a Perl interface to the libsyck data serialization library. It exports the Dump and Load functions for converting Perl data structures to YAML strings, and the other way around...

9.1CVSS5.9AI score0.00632EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/07/23 12:00 a.m.•19 views

Oracle Essbase (July 2026 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the July 2026 Critical Patch Update CPU. It is, therefore, affected by: - Apache Log4j's JsonTemplateLayout, in versions up to and including 2.25.3, produces invalid JSON output when log events contain...

6.3CVSS6AI score0.00767EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2026/07/20 4:16 p.m.•15 views

UBUNTU-CVE-2026-26199

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

6.5CVSS5.8AI score0.00351EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/07/20 2:59 p.m.•27 views

EUVD-2026-45970

HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...

5.9CVSS5.8AI score0.00351EPSS
SaveExploits1References2
Rows per page
Query Builder