Lucene search
+L

73612 matches found

Redos
Redos
•added 2026/10/09 12:00 a.m.•4 views

ROS-20261009-73-0530

The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...

5.5CVSS7.4AI score0.00123EPSS
SaveExploits0
Redos
Redos
•added 2026/10/09 12:00 a.m.•9 views

ROS-20261009-73-0081

The vulnerability of the jfs/namei.c component in the Linux operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.5CVSS6.5AI score0.00321EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•14 views

PT-2026-109272

Name of the Vulnerable Software and Affected Versions x64dbg-MCP Server versions prior to 1.2 Description The software exposes debugger functionality over HTTP and listens on 0.0.0.0 by default. In the src/core/mcp server.zig file, the parseContentLength function parses an unbounded Content-Lengt...

5.3CVSS5.8AI score0.00413EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•8 views

PT-2026-109177

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

8.7CVSS5.9AI score0.00349EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/09 12:00 a.m.•5 views

PT-2026-109182

Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

9.2CVSS6.3AI score0.00296EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2026/10/09 12:00 a.m.•8 views

Apache Thrift Integer Overflow Unauthorized Access

The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS7.5AI score0.0093EPSS
SaveExploits0References8Affected Software8
BDU FSTEC
BDU FSTEC
•added 2026/10/09 12:00 a.m.•9 views

HAProxy drl field Data Compromise

The vulnerability in the drl field of the fcgiconn structure within HAProxy server software is related to an integer overflow. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity and availability of protected information...

9.4CVSS7.3AI score0.00334EPSS
SaveExploits0References13Affected Software10
BDU FSTEC
BDU FSTEC
•added 2026/10/09 12:00 a.m.•6 views

Apache Thrift Integer Overflow DoS

The vulnerability of the Apache Thrift framework is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.5AI score0.01163EPSS
SaveExploits0References8Affected Software7
Tenable Nessus
Tenable Nessus
•added 2026/10/09 12:00 a.m.•15 views

openSUSE 16 Security Update : distribution (openSUSE-SU-2026:22039-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22039-1 advisory. This update for distribution fixes the following issue: - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an...

7.5CVSS7.3AI score0.00501EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•12 views

CVE-2026-107820: Integer Overflow or Wraparound

x64dbg-MCP Server is a native Model Context Protocol MCP plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcpserver.zig parses an unbounded Content-Length value in parseContentLength and uses it in unchecked usize addition in wsRecv before token...

5.3CVSS6.5AI score0.00413EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•9 views

CVE-2026-96396: Heap-based Buffer Overflow

The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...

4.9CVSS6.4AI score0.00096EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/09 12:00 a.m.•7 views

CVE-2026-19569: Integer Overflow or Wraparound

dynamicobjectcreate in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as objsizegetotype + size, and for thread stack elements as STACKELEMENTDATASIZEsize a round-up plus fixed overhead, without checking either expression for unsigned...

8.8CVSS6.6AI score0.0012EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/08 11:16 p.m.•19 views

CVE-2026-107729

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values above INTMAX become negative and bypass the upper-bound check. When the EXTH flag is set, the original unsigned value is...

5.5CVSS0.00146EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/08 10:35 p.m.•11 views

CVE-2026-107738

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...

6.8CVSS5.9AI score0.0012EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/08 10:35 p.m.•14 views

EUVD-2026-95413

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without a lower-bound check. An offset that becomes negative can make the function read before the /STRINGS buffer,...

6.8CVSS5.9AI score0.0012EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/08 10:19 p.m.•15 views

EUVD-2026-95402

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

5.5CVSS6AI score0.00122EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/08 10:19 p.m.•10 views

CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

5.5CVSS6AI score0.00122EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/10/08 10:19 p.m.•21 views

CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

5.5CVSS6AI score
SaveExploits0References4
CVE
CVE
•added 2026/10/08 10:19 p.m.•18 views

CVE-2026-107730

The multi-format reader SumatraPDF (version 3.7.0.22298 ) contains a signed integer overflow vulnerability in the LitParseHeader() function located in src/LitDoc.cpp . The issue occurs because the software uses signed 32-bit arithmetic to compute the section offset (hdrLen + nPieces * 16) without...

5.5CVSS6AI score0.00122EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/08 10:19 p.m.•34 views

CVE-2026-107730 SumatraPDF: Signed integer overflow in the LIT header parsing causes invalid-pointer read

SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces 16 section offset using signed 32-bit arithmetic without validating the complete result. When the component values make that aggregate calculation...

5.5CVSS0.00122EPSS
SaveExploits0References2
Rows per page
Query Builder