Lucene search
K

31 matches found

RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2026-8363

A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:...

9.8CVSS5.9AI score0.00056EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 7:42 p.m.5 views

CVE-2026-8362

A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome...

9.8CVSS6.1AI score0.00056EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/27 7:40 p.m.8 views

CVE-2026-8363 Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll

A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:...

9.8CVSS6.1AI score0.00056EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

Gladinet Triofox 安全漏洞

Gladinet Triofox is an enterprise file sharing and remote access platform developed by the American company Gladinet. There is a security vulnerability in Gladinet Triofox, which stems from a stack buffer overflow issue when processing long URL paths starting with /woshome...

9.8CVSS6AI score0.00056EPSS
Exploits0References1
NVD
NVD
added 2026/01/27 6:15 p.m.6 views

CVE-2026-0919

The HTTP parser of Tapo C210 v3, C220 v1 and C520WS v2 cameras improperly handles requests containing an excessively long URL path. An invalid‑URL error path continues into cleanup code that assumes allocated buffers exist, leading to a crash and service restart. An unauthenticated attacker can...

7.5CVSS0.0029EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 4 : zsh-4.3.11-8.AXS4 (AXSA:2018-3183:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3183:01 advisory. zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 zsh: buffer overflow when scanning very long directory paths for...

9.8CVSS8AI score0.00396EPSS
Exploits0References5
Snyk
Snyk
added 2025/11/28 2:40 p.m.1 views

Directory Traversal

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Directory Traversal via the keras.utils.getfile function when extracting tar archives. An attacker can write arbitrary files outside the intended extraction directory by...

8.5CVSS7.7AI score0.00031EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-4914

Malware in sbrugna...

5CVSS9.3AI score0.00573EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-2500

Malware in sbrugna...

2.1CVSS6.1AI score0.00063EPSS
Exploits0References12
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-37712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The npm package tar aka node-tar before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerability...

8.6CVSS7.3AI score0.00085EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2023/10/10 6:28 p.m.20 views

Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Impact ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the testitem.path field is exceeded the allowable "ltree" field type indexing limit path length=120 approximately, recursive nesting of the nested steps...

6.5CVSS6.9AI score0.00382EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2023/10/10 6:28 p.m.13 views

GHSA-MJ24-GPW7-23M9 Denial of service vulnerability on creating a Launch with too many recursively nested elements in reportportal

Impact ReportPortal database becomes unstable and reporting almost fully stops except for small launches with approximately 1 test inside when the testitem.path field is exceeded the allowable "ltree" field type indexing limit path length=120 approximately, recursive nesting of the nested steps...

6.5CVSS6.3AI score0.00382EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/10/09 12:0 a.m.3 views

PT-2023-20327 · Unknown · Reportportal

Name of the Vulnerable Software and Affected Versions: ReportPortal versions prior to 5.10.0 Description: The ReportPortal database becomes unstable and reporting almost fully stops when the test item.path field exceeds the allowable ltree field type indexing limit, which occurs when the path...

6.5CVSS6.3AI score0.00382EPSS
Exploits0References8
Ubuntu
Ubuntu
added 2023/03/02 12:20 p.m.107 views

USN-5905-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of service. CVE-2022-31628 It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to compromise data integrity...

9.1CVSS7.3AI score0.15416EPSS
Exploits3
Ubuntu
Ubuntu
added 2023/02/28 2:18 p.m.95 views

USN-5902-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled certain invalid Blowfish password hashes. An invalid password hash could possibly allow applications to accept any password as valid, contrary to expectations. CVE-2023-0567 It was discovered that PHP incorrectly handled resolving long paths. A remot...

8.1CVSS7.2AI score0.00436EPSS
Exploits2
OSV
OSV
added 2023/02/16 7:15 a.m.1 views

UBUNTU-CVE-2023-0568

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value,...

8.1CVSS6.8AI score0.00436EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:27 a.m.1 views

SUSE CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

7.8CVSS10AI score0.00893EPSS
Exploits0References53
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.1 views

SUSE CVE-2022-30630

Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators...

6.2CVSS7.7AI score0.00052EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 3:25 a.m.1 views

SUSE CVE-2022-30632

Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators...

6.2CVSS7.7AI score0.0013EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2023/01/24 12:51 p.m.2 views

golang: io/fs: stack exhaustion in Glob

A flaw was found in the golang standard library, io/fs. Calling Glob on a path that contains a large number of path separators can cause a panic issue due to stack exhaustion. This could allow an attacker to impact availability...

7.5CVSS6.6AI score0.00052EPSS
Exploits0References6
Rows per page
Query Builder