Lucene search
K

7 matches found

Positive Technologies
Positive Technologies
added 2026/05/07 12:0 a.m.13 views

PT-2026-38320

Name of the Vulnerable Software and Affected Versions gitoxide versions prior to 0.21.1 Description A malicious tree can be constructed that, when checked out, allows writing an attacker-controlled symlink into any directory where the user has write access. This occurs because gix fs::Stack::make...

7.8CVSS5.8AI score0.00248EPSS
Exploits1References13
RedhatCVE
RedhatCVE
added 2026/04/03 1:33 p.m.3 views

CVE-2026-34743

A flaw was found in XZ Utils. When the lzmaindexdecoder function processes an empty index, and a subsequent lzmaindexappend operation is performed, insufficient memory is allocated. This can lead to a buffer overflow, potentially causing a denial of service DoS for affected systems...

6.3CVSS6AI score0.00351EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-3928

Malware in sbrugna...

10CVSS9.5AI score0.00935EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 1:3 p.m.6 views

CVE-2018-11936

Index of array is processed in a wrong way inside a while loop and result in invalid index -1 or something else leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...

10CVSS7.1AI score0.00935EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/03 12:0 a.m.4 views

The vulnerability of the MongoDB database management system, related to improper validation of consistency in input data, allows a attacker to cause service failures.

The vulnerability of the MongoDB database management system is related to improper validation of consistency in input data during index processing with the PrepareUnique parameter. Exploiting this vulnerability allows an attacker to cause service failures remotely...

6.8CVSS6.8AI score0.0057EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.4 views

The vulnerability of the /goform/wifiSSIDget component in the Tenda i6 wireless access point’s microprogramming software allows a attacker to cause a service failure.

The vulnerability of the /goform/wifiSSIDget component in the Tenda i6 wireless access point software relates to the execution of operations outside the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.6AI score0.0077EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2022/03/31 12:0 a.m.8 views

The vulnerability of the nf_tables module of the netfilter subsystem in Linux operating systems allows attackers to increase their privileges.

The vulnerability of the nftables module in the netfilter subsystem of Linux kernel operating systems is related to the operation of writing data beyond the buffer boundaries when processing indexes. Exploiting this vulnerability can allow attackers to enhance their privileges by calling...

6.6CVSS6.8AI score0.01467EPSS
Exploits10References20Affected Software8
Rows per page
Query Builder