Lucene search
+L

8389 matches found

NVD
NVD
added 2026/01/27 2:15 p.m.10 views

CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS0.00304EPSS
SaveExploits1References4
OSV
OSV
added 2026/01/27 2:15 p.m.33 views

UBUNTU-CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS5.9AI score0.00304EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2026/01/27 2:15 p.m.12 views

CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS5.9AI score0.00304EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/27 1:41 p.m.43 views

CVE-2026-1484

The CVE-2026-1484 issue affects the GLib Base64 encoding routine when handling very large inputs. The vulnerability arises from incorrect integer-type usage during length calculations, which can lead to buffer boundary miscalculation and memory writes beyond allocated space. Reported impact inclu...

4.2CVSS6AI score0.00304EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/01/27 1:41 p.m.6 views

CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS6AI score0.00304EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/27 1:41 p.m.7 views

CVE-2026-1484 Glib: integer overflow leading to buffer underflow and out-of-bounds write in glib g_base64_encode()

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS6AI score0.00304EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/27 1:41 p.m.11 views

CVE-2026-1484

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

4.2CVSS5.9AI score0.00304EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2026/01/27 7:08 a.m.3 views

glib: Integer overflow in in g_escape_uri_string()

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the string to escape contains a very large number of unacceptable characters which would need escaping, the calculation of the length of the escaped string...

7.7CVSS6AI score0.00327EPSS
SaveExploits1References6
Snyk
Snyk
added 2026/01/27 12:00 a.m.4 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the realtolower and outputmarks functions. An attacker can cause memory corruption and potentially crash or destabilize applications by submitting specially crafted and extremely large Unicode strings. Remediatio...

8.1CVSS5.9AI score0.00325EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.13 views

PT-2026-4928

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

7.5CVSS6AI score0.00429EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
added 2026/01/27 12:00 a.m.12 views

MalURLBench: A Benchmark Evaluating Agents' Vulnerabilities When Processing Web URLs

LLM-based web agents have become increasingly popular for their utility in daily life and work. However, they exhibit critical vulnerabilities when processing malicious URLs: accepting a disguised malicious URL enables subsequent access to unsafe webpages, which can cause severe damage to service...

5.9AI score
SaveExploits0
OpenVAS
OpenVAS
added 2026/01/27 12:00 a.m.134 views

Ubuntu: Security Advisory (USN-7973-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS5.9AI score0.00743EPSS
SaveExploits3References2
Snyk
Snyk
added 2026/01/27 12:00 a.m.7 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the gbase64encodeclose function. An attacker can cause memory corruption or application crashes by providing excessively large or untrusted input data. Remediation A fix was pushed into the master branch but not...

8.1CVSS5.9AI score0.00304EPSS
SaveExploits1References4
Broadcom
Broadcom
added 2026/01/27 12:00 a.m.21 views

Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service

CVE-2019-9704 Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service daemon crash via a large crontab file because the calloc return value is not checked. CVE-2019-9705 Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of...

5.5CVSS5.9AI score0.00354EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.16 views

Glib buffer error vulnerability

GLib is a general-purpose, portable utility library for the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, and abstraction for main loops. GLib has a buffer error vulnerability, which stems from the Base64 encoding routine’s improper...

4.2CVSS6AI score0.00304EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/01/26 11:28 p.m.7 views

Directory Traversal

Overview python-multipart is an A streaming multipart parser for Python Affected versions of this package are vulnerable to Directory Traversal via unsinitised file names passed directly into os.path.joinfiledir, fname function. An attacker can write files to arbitrary locations on the filesystem...

8.6CVSS7.3AI score0.02228EPSS
SaveExploits5References2
OSV
OSV
added 2026/01/26 2:36 p.m.7 views

BIT-CROSSPLANE-2023-37900 Crossplane vulnerable to denial of service from large image

Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1.11.5, 1.12.3, and 1.13.0, a high-privileged user could create a Package referencing an arbitrarily large image containing that Crossplane would then parse, possibly resulting i...

3.4CVSS5.9AI score0.00621EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/01/26 12:00 a.m.15 views

PT-2026-4853

A flaw has been found in Totolink A8000RU 7.1cu.643 b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the argument mode causes os command injection. The attack is possible to be carried out remotely. The...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References7
Packet Storm News
Packet Storm News
added 2026/01/26 12:00 a.m.20 views

AgenticSCR: An Autonomous Agentic Secure Code Review for Immature Vulnerabilities Detection

Secure code review is critical at the pre-commit stage, where vulnerabilities must be caught early under tight latency and limited-context constraints. Existing SAST-based checks are noisy and often miss immature, context-dependent vulnerabilities, while standalone Large Language Models LLMs are...

5.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2026/01/25 12:00 a.m.10 views

Mitigating the OWASP Top 10 for Large Language Models Applications Using Intelligent Agents

Large Language Models LLMs have emerged as a transformative and disruptive technology, enabling a wide range of applications in natural language processing, machine translation, and beyond. However, this widespread integration of LLMs also raised several security concerns highlighted by the Open...

5.9AI score
SaveExploits0
Rows per page
Query Builder