Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/11 12:00 a.m.•4 views

CVE-2026-89528: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sending multiple segments whose cumulative length exceeds the rqpages arra...

7.5CVSS5.7AI score0.00655EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/22 4:19 p.m.•54 views

CVE-2026-54270 protobufjs: Memory amplification from preserved unknown fields in binary decode

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload containing many unknown...

5.3CVSS0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/22 4:19 p.m.•19 views

CVE-2026-54270 protobufjs: Memory amplification from preserved unknown fields in binary decode

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload containing many unknown...

5.3CVSS5.9AI score0.00402EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/22 4:19 p.m.•18 views

CVE-2026-54270 protobufjs: Memory amplification from preserved unknown fields in binary decode

protobufjs compiles protobuf definitions into JavaScript JS functions. From 8.2.0 to 8.4.2, protobufjs preserved unknown wire elements in message.$unknowns and did not provide a decode-time option to discard unknown fields before retaining them. A crafted protobuf payload containing many unknown...

5.3CVSS6AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/15 12:00 a.m.•26 views

PT-2026-49585

Name of the Vulnerable Software and Affected Versions protobufjs versions 8.2.0 through 8.4.2 Description protobufjs preserves unknown wire elements in message.$unknowns during binary decode but lacks a decode-time option to discard these fields before retention. A crafted protobuf payload...

5.3CVSS5.7AI score0.00402EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
•added 2023/02/15 5:16 a.m.•10 views

SUSE CVE-2015-5327

Out-of-bounds memory read in the x509decodetime function in x509certparser.c in Linux kernels 4.3-rc1 and after...

6.5CVSS7AI score0.01631EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2016/06/13 12:00 a.m.•3 views

PT-2017-6844

Name of the Vulnerable Software and Affected Versions Linux kernels versions 4.3-rc1 and later Description The issue is related to an out-of-bounds memory read in the x509 decode time function, located in the x509 cert parser.c file. This problem affects Linux kernels. Recommendations For Linux...

6.5CVSS0.01631EPSS
SaveExploits0References34
Rows per page
Query Builder