Lucene search
+L

7524 matches found

Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.9 views

PT-2026-35985

Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling SEH based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can craft a payload with junk data, NSEH bypass,...

8.5CVSS6.3AI score0.00157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.7 views

PT-2026-35990

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute...

8.6CVSS6.2AI score0.0015EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.10 views

PT-2026-35982

Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling SEH mechanisms. Attackers can inject malicious payload through the optional proxy hostname field in the PrimeNet connection settings to trigger...

8.6CVSS6.2AI score0.00162EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.17 views

PT-2026-35984

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling SEH local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode tha...

8.6CVSS6.4AI score0.00157EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/04/29 12:0 a.m.11 views

PT-2026-35997

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception...

8.6CVSS6.3AI score0.00165EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2026/04/29 12:0 a.m.15 views

Flexense SysGauge Pro 安全漏洞

Flexense SysGauge Pro is a system analysis tool developed by Flexense Corporation, designed for real-time monitoring of system performance and resource usage. Version 4.6.12 of Flexense SysGauge Pro contains a security vulnerability. This vulnerability stems from a local buffer overflow in the...

8.6CVSS6.4AI score0.0015EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/28 3:30 p.m.6 views

GHSA-37W2-Q6VH-45V6 Spring gRPC AuthenticationException messages are reflected to remote client

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks. Affected versions: Spring gRPC:...

3.7CVSS5.8AI score0.002EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/28 3:16 p.m.8 views

CVE-2026-40969

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks. Affected versions: Spring gRPC:...

5.3CVSS0.002EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/28 2:54 p.m.24 views

CVE-2026-40969

CVE-2026-40969 affects Spring gRPC 1.0.0–1.0.2, where the server-side AuthenticationException message is echoed in the gRPC status description returned to unauthenticated remote callers. This information disclosure could aid in understanding authentication failures and may assist subsequent attac...

5.3CVSS5.3AI score0.002EPSS
SaveExploits0References1Affected Software1
vulnersOsv
vulnersOsv
added 2026/04/28 12:31 a.m.15 views

com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example (=3.0.7), com.okta.spring.examples:okta-spring-boot-redirect-code-flow-example (=3.0.7) +21 more potentially affected by CVE-2026-40972 via org.springframework.boot:spring-boot-devtools (>=3.3.0 <=3.3.1)

org.springframework.boot:spring-boot-devtools MAVEN version =3.3.0, =1.6.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 - org.bremersee:common-exception-spring-boot-autoconfigure =1.1.0 - org.bremersee:common-exception-spring-boot-web-starter =1.1.0 -...

7.5CVSS5.8AI score0.00262EPSS
SaveExploits0
Spring Security Advisories
Spring Security Advisories
added 2026/04/28 12:0 a.m.10 views

Spring gRPC AuthenticationException message reflected to remote client

The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks...

3.7CVSS5.9AI score0.002EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/04/27 10:30 p.m.6 views

CVE-2026-7183 aligungr UERANSIM Radio Link Simulation Layer rls_pdu.cpp DecodeRlsMessage uncaught exception

A vulnerability has been found in aligungr UERANSIM up to 3.2.7. The affected element is the function rls::DecodeRlsMessage in the library src/lib/rls/rlspdu.cpp of the component Radio Link Simulation Layer. The manipulation of the argument pduLength leads to uncaught exception. The attack may be...

6.9CVSS5.6AI score
SaveExploits0References8
OSV
OSV
added 2026/04/27 2:3 p.m.17 views

JLSEC-2026-210

An issue in the Leptonica linked library v1.79.0 allows attackers to cause an arithmetic exception leading to a Denial of Service DoS via a crafted JPEG file...

6.5CVSS5.3AI score0.01146EPSS
SaveExploits1References4
NVD
NVD
added 2026/04/27 12:16 p.m.13 views

CVE-2026-5937

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

5.5CVSS0.00103EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/27 11:0 a.m.37 views

CVE-2026-5937 Foxit PDF Editor/Reader's insufficient parameter validation leads to denial-of-service vulnerability

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

5.5CVSS0.00103EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/27 11:0 a.m.5 views

CVE-2026-5937

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2026/04/27 11:0 a.m.49 views

CVE-2026-5937

CVE-2026-5937 is associated with Foxit PDF Editor/Reader and is caused by insufficient parameter verification that can lead to format errors in files. This triggers an unhandled std::invalid_argument exception, which results in the application terminating (denial of service). The available docume...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References1Affected Software2
EUVD
EUVD
added 2026/04/27 11:0 a.m.9 views

EUVD-2026-25823

Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalidargument" exception, ultimately causing the program to terminate...

5.5CVSS5.2AI score0.00103EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/27 7:0 a.m.11 views

EUVD-2026-25788

A weakness has been identified in Tenda F456 1.0.0.5. This issue affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter of the component httpd. This manipulation of the argument page causes buffer overflow. The attack can be initiated remotely. The exploit has been...

9CVSS6AI score0.00815EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.16 views

Foxit PDF Reader和Foxit PDF Editor 安全漏洞

Foxit PDF Reader and Foxit PDF Editor are products of Foxit Corporation in China. Foxit PDF Reader is a PDF reader. Foxit PDF Editor is a PDF editor. Both Foxit PDF Reader and Foxit PDF Editor have security vulnerabilities. These vulnerabilities stem from insufficient parameter validation, which...

5.5CVSS5.8AI score0.00103EPSS
SaveExploits0References1
Rows per page
Query Builder