CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8036 matches found

Mend•added 2026/07/27 4:52 p.m.•10 views

CVE-2026-66729

facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32t wraparound ...

8.7CVSS6AI score0.00784EPSS

SaveExploits0References6

osv_debian•added 2026/07/27 4:17 p.m.•29 views

DEBIAN-CVE-2026-54890

Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The BITBINARYEX...

7.5CVSS7.3AI score0.0042EPSS

SaveExploits0References1

NVD•added 2026/07/27 4:17 p.m.•30 views

CVE-2026-54890

8.2CVSS0.0042EPSS

SaveExploits0References5

osv_ubuntu•added 2026/07/27 4:17 p.m.•29 views

UBUNTU-CVE-2026-54890

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References3

UbuntuCve•added 2026/07/27 4:17 p.m.•24 views

CVE-2026-54890

8.2CVSS7.2AI score0.0042EPSS

SaveExploits0References2

CVE•added 2026/07/27 3:39 p.m.•71 views

CVE-2026-54890

CVE-2026-54890 describes an Integer Underflow in the BEAM VM’s ETF decoder: the BIT_BINARY_EXT (tag 77) handler accepts an encoding with length and trailing-bits both zero, causing the bitstring size calculation to underflow and produce a ~2^64 value, which is then used as a memory allocation siz...

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References5Affected Software2

Debian CVE•added 2026/07/27 3:39 p.m.•28 views

CVE-2026-54890

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0

Mend•added 2026/07/27 3:39 p.m.•7 views

CVE-2026-54890

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References9

osv_cve•added 2026/07/27 3:39 p.m.•27 views

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References9

attackerkb•added 2026/07/27 3:39 p.m.•23 views

CVE-2026-54890

8.2CVSS7.4AI score0.0042EPSS

SaveExploits0References6Affected Software1

osv_eef•added 2026/07/27 3:39 p.m.•28 views

EEF-CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

Summary Integer Underflow Wrap or Wraparound vulnerability in erlang otp erlang/otp erts modules, erlang otp erts erts modules allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.c, emulator/beam/external.c. The...

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References4

Vulnrichment•added 2026/07/27 3:39 p.m.•20 views

CVE-2026-54890 BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2026/07/27 12:00 a.m.•10 views

CVE-2026-54890: Integer Underflow (Wrap or Wraparound)

8.2CVSS7.4AI score0.0042EPSS

SaveExploits0References8

Positive Technologies•added 2026/07/27 12:00 a.m.•31 views

PT-2026-64993

Name of the Vulnerable Software and Affected Versions erlang otp versions 27.0 through 27.3.4.14 erlang otp version 28.5.0.3 erlang otp versions 29.0 through 29.0.3 erts versions 15.0 through 15.2.7.10 erts version 16.4.0.3 erts versions 17.0 through 17.0.3 Description An integer underflow exists...

8.2CVSS7.3AI score0.0042EPSS

SaveExploits0References65

Rapid7 Vulnerability Database (full)•added 2026/07/27 12:00 a.m.•9 views

CVE-2026-66729: Out-of-bounds Read

8.7CVSS6AI score0.00784EPSS

SaveExploits0References2

Microsoft CVE•added 2026/07/26 8:04 a.m.•18 views

libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

...

8.7CVSS7.3AI score0.00583EPSS

SaveExploits0

RedHat Linux•added 2026/07/25 10:02 p.m.•11 views

sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

A flaw was found in SQLite, specifically within its FTS5 full-text search extension. Attackers can exploit a heap-based buffer overflow by providing a specially crafted database. This crafted database contains malicious metadata that triggers an integer underflow during FTS5 MATCH query processin...

8.5CVSS7.7AI score0.00182EPSS

SaveExploits0References8

UbuntuCve•added 2026/07/25 10:17 a.m.•19 views

CVE-2026-64351

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: bound RX frame length in kalmiarxfixup kalmiarxfixup computes usbpacketlength = skb-len - 2 KALMIAHEADERLENGTH as a u16, guarded only by a pre-loop check that skb-len is at least KALMIAHEADERLENGTH, which is 6. ...

5.5CVSS6.1AI score0.0013EPSS

SaveExploits0References30

Rapid7 Vulnerability Database (full)•added 2026/07/25 12:00 a.m.•5 views

CVE-2026-64351: Undefined Security Weakness

5.5CVSS6.1AI score0.0013EPSS

SaveExploits0References9

osv_azl•added 2026/07/24 11:16 p.m.•34 views

AZL-94101 CVE-2026-66337 affecting package libsoup 3.4.4-18

A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...

6.5CVSS5.9AI score0.00246EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by