Lucene search
+L

71199 matches found

EUVD
EUVD
•added 2026/09/25 8:49 p.m.•14 views

EUVD-2026-87360

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

7.5CVSS5.7AI score0.00327EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:49 p.m.•26 views

CVE-2026-10758

The Esri LERC open-source image or raster format is vulnerable to a Heap based Out-of-Bounds Write caused by an Integer Overflow . This flaw affects LERC versions 4.1.0 and earlier . A remote, unauthenticated attacker can exploit this by providing specifically crafted imagery to an application us...

7.5CVSS5.7AI score0.00327EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:49 p.m.•32 views

CVE-2026-10758 Esri Lerc has a security vulnerability

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

7.5CVSS0.00327EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 8:49 p.m.•19 views

CVE-2026-10758 Esri Lerc has a security vulnerability

Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker...

7.5CVSS5.7AI score0.00327EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:26 p.m.•12 views

EUVD-2025-211004

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:26 p.m.•32 views

CVE-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

6.5CVSS0.00341EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:26 p.m.•30 views

CVE-2025-14181

A heap-based buffer overflow vulnerability exists in the PHP SOAP HTTP client during HTTP response parsing. The flaw stems from a buffer size check that relies on signed integer overflow , which is undefined behavior and can be optimized away by compilers. A malicious SOAP server can provide craf...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/25 8:26 p.m.•17 views

CVE-2025-14181

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0
Mend
Mend
•added 2026/09/25 8:26 p.m.•7 views

CVE-2025-14181

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

8.3CVSS6.3AI score0.00341EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 8:26 p.m.•26 views

CVE-2025-14181 Integer overflow to buffer overflow in soap HTTP parsing

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/25 8:26 p.m.•14 views

CVE-2025-14181

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it...

6.5CVSS6.3AI score0.00341EPSS
SaveExploits0
NVD
NVD
•added 2026/09/25 8:17 p.m.•17 views

CVE-2026-100208

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

7.5CVSS0.00348EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/25 8:08 p.m.•16 views

CVE-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

4.3CVSS5.9AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/25 8:08 p.m.•43 views

CVE-2026-6103

The php language environment is vulnerable to an integer overflow in the phar_tar_number() function. The function fails to perform an overflow check when parsing the 11-octal-digit size field of a TAR header into a uint32_t. Consequently, sizes exceeding 0xFFFFFFFF silently wrap, causing the pars...

4.3CVSS5.9AI score0.00167EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/25 8:08 p.m.•5 views

CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

5.1CVSS5.9AI score0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/25 8:08 p.m.•32 views

CVE-2026-6103 Phar TAR phar_tar_number() Integer Overflow - Archive Entry Injection

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

4.3CVSS0.00167EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 8:08 p.m.•12 views

EUVD-2026-87322

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

4.3CVSS5.9AI score0.00167EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2026/09/25 8:08 p.m.•15 views

CVE-2026-6103

phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to 0x1FFFFFFFF, so a size above 0xFFFFFFFF silently wraps. The parser then skips the wrong number of data blocks and interprets attacker-controlle...

4.3CVSS5.9AI score0.00167EPSS
SaveExploits0
CVE
CVE
•added 2026/09/25 7:39 p.m.•131 views

CVE-2026-100208

A vulnerability exists in Microsoft Office Outlook due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. While specific component details or patch versions are not provided in the documents, the vulnerability...

7.5CVSS6.2AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/25 7:39 p.m.•15 views

EUVD-2026-87317

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

7.5CVSS6.2AI score0.00348EPSS
SaveExploits0References1
Rows per page
Query Builder