Lucene search
+L

57455 matches found

RedHat Linux
RedHat Linux
added 2026/08/17 5:53 p.m.9 views

Important: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

9.1CVSS5.6AI score0.00484EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/17 5:53 p.m.14 views

haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling

A flaw was found in HAProxy. A malicious FastCGI Fast Common Gateway Interface backend can exploit an integer overflow vulnerability in the fcgiconn structure's drl field. This occurs when specific contentLength and paddingLength values cause the drl field to wrap to zero, leading to incorrect...

9.1CVSS5.4AI score0.00347EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/17 5:48 p.m.5 views

CVE-2026-72033

A flaw was found in OrangeFS, a file system within the Linux kernel. An integer overflow occurs in the fillfrompart function when calculating the size of a directory entry. This happens because the size is computed as a 64-bit value but stored as a 32-bit value, allowing a large entry length to...

9.8CVSS5.5AI score0.00739EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/17 5:26 p.m.7 views

Important: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

9.1CVSS5.6AI score0.00484EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/17 5:26 p.m.8 views

haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling

A flaw was found in HAProxy. A malicious FastCGI Fast Common Gateway Interface backend can exploit an integer overflow vulnerability in the fcgiconn structure's drl field. This occurs when specific contentLength and paddingLength values cause the drl field to wrap to zero, leading to incorrect...

9.1CVSS5.4AI score0.00347EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/08/17 5:19 p.m.17 views

Important: Red Hat Security Advisory: haproxy security update

An update for haproxy is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

9.1CVSS5.7AI score0.00484EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/08/17 5:19 p.m.13 views

haproxy: HAProxy: Response smuggling due to integer overflow in FastCGI record length handling

A flaw was found in HAProxy. A malicious FastCGI Fast Common Gateway Interface backend can exploit an integer overflow vulnerability in the fcgiconn structure's drl field. This occurs when specific contentLength and paddingLength values cause the drl field to wrap to zero, leading to incorrect...

9.1CVSS5.6AI score0.00347EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/17 5:16 p.m.7 views

UBUNTU-CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

8.9CVSS5.4AI score0.00338EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/17 5:13 p.m.12 views

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

7CVSS6.5AI score0.00142EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2026/08/17 4:43 p.m.10 views

USN-8629-2: Linux kernel (AWS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Network drivers; - Network traffic control; - IPv4 networking; - IPv6...

9.8CVSS6.1AI score0.00908EPSS
SaveExploits18
OSV
OSV
added 2026/08/17 4:36 p.m.9 views

GHSA-8R8V-XF7Q-RCPR New API: Integer overflow in quota billing yields negative charges (self-crediting)

Summary Multiple billing paths multiplied user-controlled quantity parameters into the quota calculation without an upper bound or overflow-safe integer conversion. A crafted extreme value e.g. image n = 18446744073686646784, a wrapped-negative accepted by a uint field makes conversions like...

9.1CVSS5.6AI score0.00519EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/08/17 4:36 p.m.8 views

New API: Integer overflow in quota billing yields negative charges (self-crediting)

Summary Multiple billing paths multiplied user-controlled quantity parameters into the quota calculation without an upper bound or overflow-safe integer conversion. A crafted extreme value e.g. image n = 18446744073686646784, a wrapped-negative accepted by a uint field makes conversions like...

9.1CVSS5.5AI score0.00519EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2026/08/17 4:17 p.m.9 views

CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS0.00519EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/08/17 4:11 p.m.10 views

CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS5.3AI score0.00519EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/08/17 4:11 p.m.14 views

CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/17 4:11 p.m.47 views

CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS0.00519EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/17 4:11 p.m.9 views

EUVD-2026-60262

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS5.3AI score0.00519EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/17 4:11 p.m.66 views

CVE-2026-71479

In New API (github.com/QuantumNous/new-api) before 1.0.0-rc.18, user-controlled billing multipliers (n, duration, max_tokens, etc.) lacked upper-bound validation and overflow-safe conversion in common/quota_math.go, causing integer overflow into negative settlement charges that credit attacker ac...

9.1CVSS5.4AI score0.00519EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2026/08/17 3:41 p.m.10 views

Security Bulletin: Improper input validation, integer overflow, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service

Summary IBM Storage Defender - Resiliency Service is vulnerable to improper input validation, integer overflow, and others. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message pars...

8.7CVSS6.5AI score0.0087EPSS
SaveExploits1Affected Software1
RedHat Linux
RedHat Linux
added 2026/08/17 3:39 p.m.8 views

kernel: drm/amd/display: Use krealloc_array() in dal_vector_reserve()

A flaw was found in the Linux kernel's drm/amd/display component. The dalvectorreserve function calculates memory allocation size using 32-bit arithmetic, which can lead to an integer overflow. This overflow causes a smaller memory buffer to be allocated than intended, resulting in a heap overflo...

7CVSS5.4AI score0.00142EPSS
SaveExploits0References5
Rows per page
Query Builder