Lucene search
+L

2307 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/24 10:31 p.m.•18 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to improper encoding in Apache Log4j [CVE-2026-49844]

Summary IBM Watson Speech Services Cartridge is vulnerable to Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API, which produces output that is not valid JSON CVE-2026-49844. Apache Log4j is included in our speech microservices. This...

6.3CVSS5.7AI score0.00813EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/08/21 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2022-4996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with...

6.9CVSS5.4AI score0.00637EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/20 10:17 p.m.•32 views

AZL-96894 CVE-2026-55893 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c SH floating-point decoders such as opFADD, opFMUL, and opFSUB call setreg and setregn using shinfo.op.opcount without checking the fixed-size operands array. Repeated crafted instructions process...

7.3CVSS6.6AI score0.00186EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/20 12:35 a.m.•17 views

EUVD-2022-56020

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.5AI score0.00637EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/20 12:16 a.m.•17 views

CVE-2022-4996

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS0.00637EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/20 12:16 a.m.•35 views

AZL-97542 CVE-2022-4996 affecting package nghttp2 1.61.0-3

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.4AI score0.00637EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/20 12:16 a.m.•16 views

CVE-2022-4996

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.2AI score0.00637EPSS
SaveExploits0References6
OSV
OSV
•added 2026/08/20 12:16 a.m.•12 views

UBUNTU-CVE-2022-4996

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.4AI score0.00637EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•4 views

CVE-2022-4996: Floating Point Comparison with Incorrect Operator

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.5AI score0.00637EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/19 11:45 p.m.•74 views

CVE-2022-4996

In mruby 3.1.0, the udiv function in bigint.c uses an incorrect operator for floating-point comparison, enabling a remote denial-of-service attack; a proof-of-concept exploit exists and an official fix is available, so upgrading to the patched version is recommended.

6.9CVSS5.5AI score0.00637EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/08/19 11:45 p.m.•14 views

CVE-2022-4996 mruby bigint.c udiv floating point comparison with incorrect operator

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS5.5AI score0.00637EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/19 11:45 p.m.•44 views

CVE-2022-4996 mruby bigint.c udiv floating point comparison with incorrect operator

A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to...

6.9CVSS0.00637EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•23 views

PT-2026-78868

Name of the Vulnerable Software and Affected Versions mruby version 3.1.0 Description A flaw exists in the udiv function within the bigint.c file. A remote attacker can perform a manipulation that results in a floating point comparison using an incorrect operator. Recommendations Apply a patch to...

6.9CVSS5.9AI score0.00637EPSS
SaveExploits0References12
BDU FSTEC
BDU FSTEC
•added 2026/08/17 12:00 a.m.•16 views

The vulnerability of the Linux operating system’s kernel module fat allows a hacker to cause a service failure.

The vulnerability of the fat kernel module in the Linux operating system is related to a significant loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure using a corrupted FAT image...

5.5CVSS6.1AI score0.00162EPSS
SaveExploits0References17Affected Software3
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•14 views

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

7.5CVSS6.1AI score0.00854EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/17 12:00 a.m.•12 views

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

7.5CVSS6.8AI score0.00854EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/13 3:55 p.m.•6 views

JLSEC-2026-1305

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

5.5CVSS6.5AI score0.00984EPSS
SaveExploits0References5
NVD
NVD
•added 2026/08/13 2:16 p.m.•13 views

CVE-2026-28170

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

7.1CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/13 1:36 p.m.•15 views

CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 1:36 p.m.•36 views

CVE-2026-28170

CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Rows per page
Query Builder