Lucene search
+L

10 matches found

Redos
Redos
•added 2026/07/13 12:00 a.m.•16 views

ROS-20260713-73-0045

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

7.5CVSS7.5AI score0.00729EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•21 views

PT-2026-59014

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function get bytes from web url of the file src/agentscope/ utils/ common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate...

7.5CVSS6.6AI score0.00513EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2026/05/13 12:00 a.m.•29 views

The vulnerability of the mbuf_get_bytes() and mbuf_get_chars() functions in PostgreSQL PgBouncer’s connection pool allows a hacker to cause a service failure.

The vulnerability of the mbufgetbytes and mbufgetchars functions in PostgreSQL’s PgBouncer connection pool lies in integer overflow. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted authentication packet called SCRAM...

7.8CVSS6.4AI score0.00729EPSS
SaveExploits1References6Affected Software2
OSV
OSV
•added 2026/04/20 6:31 a.m.•22 views

GHSA-8GGF-R3VM-P3JC AgentScope vulnerable to Server-Side Request Forgery

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function getbytesfromweburl of the file src/agentscope/utils/common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the...

7.3CVSS6.7AI score0.00513EPSS
SaveExploits0References6
NVD
NVD
•added 2026/04/20 5:16 a.m.•17 views

CVE-2026-6605

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function getbytesfromweburl of the file src/agentscope/utils/common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the...

7.5CVSS0.00513EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/20 4:30 a.m.•40 views

CVE-2026-6605

Scope: modelscope agentscope up to 1.0.18. Affected component: Internal Service, file src/agentscope/_utils/_common.py, function _get_bytes_from_web_url. Description indicates a server-side request forgery vulnerability caused by a manipulation of this function. Attack could be performed remotely...

7.5CVSS6.6AI score0.00513EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•4 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992947 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and...

5.5CVSS6.1AI score0.00257EPSS
SaveExploits0References3
OSV
OSV
•added 2024/10/21 6:15 p.m.•11 views

UBUNTU-CVE-2024-49892

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and maybe not assigned to other values, should not be 0. bytesperelementy & bytesperelementc are initialized by getbytesperelement whic...

5.5CVSS6.2AI score0.00257EPSS
SaveExploits0References43
Positive Technologies
Positive Technologies
•added 2019/02/28 12:00 a.m.•5 views

PT-2019-16026

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a possible degradation of randomness in the random get bytes function of random.c, which could lead to local information disclosure via an insecure wireless connection. No...

7.5CVSS0.00857EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2015/01/30 12:00 a.m.•4 views

PT-2015-4101

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue is related to an "XPC type confusion" problem in the xpc data get bytes function within the libxpc library. This function does not properly verify the data type of a dictionary's...

9.3CVSS0.08254EPSS
SaveExploits2References10
Rows per page
Query Builder