Lucene search
+L

14084 matches found

CVE
CVE
added yesterday11 views

CVE-2026-69244

AIOHTTP vulnerability CVE-2026-69244 affects the aiohttp library prior to 3.14.3. The issue is an out-of-bounds heap read in the C-based response parser during error message construction, specifically in aiohttp/_http_parser.pyx where an llhttp error-position pointer is used to build a snippet fo...

7.1CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added yesterday6 views

EUVD-2026-52438

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker controlled server, or possibly an accidental response, could trigg...

7.1CVSS5.8AI score
SaveExploits0References4
EUVD
EUVD
added yesterday7 views

EUVD-2026-50409

undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives...

7.4CVSS7.2AI score0.00268EPSS
SaveExploits0References6
Veracode
Veracode
added yesterday3 views

Improper Encoding Or Escaping Of Output

Apache Log4j API is vulnerable to Improper Encoding or Escaping of Output. The vulnerability is due to improper encoding of non-finite floating-point values during MapMessage JSON serialization, which allows an attacker to inject NaN or Infinity values that produce malformed JSON and disrupt...

6.3CVSS5.5AI score0.00574EPSS
SaveExploits0References6Affected Software1
Rockylinux
Rockylinux
added yesterday6 views

nodejs:22 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.2CVSS6.3AI score0.00424EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added yesterday5 views

tar: Node-tar: Denial of Service via malformed tar archive header

A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...

8.7CVSS7.1AI score0.00418EPSS
SaveExploits1References7
NVD
NVD
added 3 days ago6 views

CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS0.00354EPSS
SaveExploits0References3
NVD
NVD
added 3 days ago4 views

CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

8.7CVSS0.00432EPSS
SaveExploits0References3
Cvelist
Cvelist
added 3 days ago29 views

CVE-2026-67304 FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS0.00354EPSS
SaveExploits0References3
CVE
CVE
added 3 days ago17 views

CVE-2026-67304

FreeRDP had a null pointer dereference vulnerability in the smartcard device control request cleanup when reader-state decoding fails (affects FreeRDP prior to 3.29.0). An attacker can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the proces...

8.7CVSS5.5AI score0.00354EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 3 days ago7 views

CVE-2026-67304

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS5.5AI score0.00354EPSS
SaveExploits0References4
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-51848

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS5.5AI score0.00354EPSS
SaveExploits0References3
OSV
OSV
added 3 days ago6 views

CVE-2026-67304 FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup

FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers can send malformed smartcard IRP requests with non-zero cReaders and truncated reader-state data to crash the process via null pointer...

8.7CVSS5.5AI score
SaveExploits0References5
OSV
OSV
added 4 days ago7 views

DEBIAN-CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS5.5AI score0.00371EPSS
SaveExploits0References1
NVD
NVD
added 4 days ago8 views

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS0.00371EPSS
SaveExploits0References4
Cvelist
Cvelist
added 4 days ago36 views

CVE-2026-54909 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS0.00371EPSS
SaveExploits0References4
CVE
CVE
added 4 days ago13 views

CVE-2026-54909

CVE-2026-54909 affects the Go library pion/stun. The vulnerability arises when parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN/ICE Binding responses, where XORMappedAddress.GetFromAs can panic. This leads to a remote denial of service. The issue is fixed in version 3.1.3; upgrading...

5.3CVSS5.5AI score0.00371EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 4 days ago10 views

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS5.5AI score0.00371EPSS
SaveExploits0
OSV
OSV
added 4 days ago4 views

CVE-2026-54909 Pion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS5.5AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 4 days ago8 views

CVE-2026-54909

pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAddress.GetFromAs can panic while parsing a malformed short XOR-MAPPED-ADDRESS attribute in STUN or ICE Binding-response parsing paths, allowing remote denial of service. This issue is fixed in version 3.1.3...

5.3CVSS5.5AI score0.00371EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder