Lucene search
K

4763 matches found

NVD
NVD
added 2026/03/19 3:16 p.m.2 views

CVE-2026-2369

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

9.1CVSS0.0042EPSS
Exploits0References3
OSV
OSV
added 2026/03/19 3:16 p.m.1 views

UBUNTU-CVE-2026-2369

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

9.1CVSS6AI score0.0042EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/19 2:20 p.m.3 views

CVE-2026-2369 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

6.5CVSS6AI score0.0042EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/03/19 2:20 p.m.23 views

CVE-2026-2369 Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

6.5CVSS0.0042EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/19 2:20 p.m.7 views

CVE-2026-2369

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...

9.1CVSS5.6AI score0.0042EPSS
Exploits0
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.8 views

wolfSSL 安全漏洞

wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the American company wolfSSL, aimed at developers working with embedded systems. Versions of wolfSSL prior to 5.8.4 contained a security vulnerability. This vulnerability stemmed from an integer underflow in the AEA...

5.3CVSS6AI score0.00251EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/03/18 12:24 a.m.3 views

SUSE CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

5.3CVSS5.8AI score0.00193EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/03/17 6:11 p.m.4 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS6.3AI score0.00313EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/03/17 6:11 p.m.24 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS0.00313EPSS
Exploits1References1
CVE
CVE
added 2026/03/17 6:11 p.m.10 views

CVE-2026-25772

Wazuh Database synchronization module (wdb_delta_event.c) contains a stack-based buffer overflow due to an integer underflow in the query buffer size calculation. Affected range: 4.4.0 up to, and including, 4.14.2 (fixed in 4.14.3). If a payload causes the 2048-byte query buffer to overflow, the ...

7.2CVSS6.3AI score0.00313EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2026/03/17 6:11 p.m.5 views

CVE-2026-25772 Wazuh Database Synchronization Vulnerable to Stack-based Buffer Overflow via snprintf Integer Underflow

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...

4.9CVSS6.3AI score0.00313EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/03/17 12:0 a.m.5 views

Wazuh 数字错误漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. Versions of Wazuh from 4.4.0 to 4.14.3 contained a numerical error vulnerability. This...

7.2CVSS6.2AI score0.00313EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/16 3:30 p.m.2 views

EUVD-2026-12127

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS6.3AI score0.00376EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/16 2:29 p.m.4 views

CVE-2026-3084

A flaw was found in GStreamer. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. The issue stems from an integer underflow during the parsing of H.266 video codec picture partitions, caused by insufficient validation of user-supplied data...

7.8CVSS6.5AI score0.00376EPSS
Exploits0References5
OSV
OSV
added 2026/03/16 2:19 p.m.1 views

CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS6.3AI score
Exploits0References2
NVD
NVD
added 2026/03/16 2:19 p.m.2 views

CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS0.00376EPSS
Exploits0References2
NVD
NVD
added 2026/03/16 2:19 p.m.3 views

CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS0.00193EPSS
Exploits1References2
OSV
OSV
added 2026/03/16 2:19 p.m.2 views

UBUNTU-CVE-2026-3084

GStreamer H.266 Codec Parser Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

7.8CVSS6.2AI score0.00376EPSS
Exploits0References4
OSV
OSV
added 2026/03/16 2:19 p.m.2 views

UBUNTU-CVE-2026-32775

libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow...

7.8CVSS5.8AI score0.00193EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2026/03/16 1:59 p.m.4 views

CVE-2026-32775

A flaw was found in libexif. When decoding MakerNotes, an integer underflow can occur in the exifmnotedatagetvalue function if a zero size is passed. This can lead to a buffer overwrite, potentially allowing an attacker to achieve arbitrary code execution, disclose sensitive information, or cause...

7.4CVSS6AI score0.00193EPSS
Exploits1References5
Rows per page
Query Builder