43967 matches found
EUVD-2026-73338
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
CVE-2026-70065
CVE-2026-70065 affects the Windows DHCP Server , where a missing release of memory after its effective lifetime allows an unauthorized, network-based attacker to cause a denial of service with no impact to confidentiality or integrity. The CVSS 3.1 score is 7.5 (HIGH) with low attack complexity a...
EUVD-2026-73023
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-69588
CVE-2026-69588 affects Windows TCP/IP and is caused by a missing release of memory after its effective lifetime (a memory leak). An unauthorized network-based attacker with no privileges and no user interaction can trigger a denial of service , rated CVSS 7.5 (High) with high availability impact....
Windows DHCP Server Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
Windows TCP/IP Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
DEBIAN-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-86714
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console outp...
CVE-2026-62437 x86: DMs may cause mem leak by IRQ binding
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-62437
CVE-2026-62437 is a memory leak vulnerability in the Xen hypervisor's x86 device model (DM) path. During guest termination, PCI device cleanup removes IRQ tracking structures early in the process, but the guest's DM can subsequently re-establish those structures by re-binding IRQs , leaving at le...
CVE-2025-14177
CVE-2025-14177 — PHP getimagesize 堆内存泄漏 仅限授权的渗透测试和安全研究使用。 漏洞 字段| 值 ---|--- CVE| CVE-2025-14177 CWE| CWE-524 使用未初始化的资源 严重性| 中危 — CVSS 6.3 根本原因| phpreadstreamallchunks 将连续的数据块写入 buffer0,覆盖之前的数据,导致未初始化的堆内存泄漏 受影响版本 PHP 8.1.34 PHP 8.2.30 PHP 8.3.29 PHP 8.4.16 PHP 8.5.1 修复版本 PHP 8.1.34 / 8.2.30 / 8.3.2...
UBUNTU-CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
CVE-2026-62437
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
x86: DMs may cause mem leak by IRQ binding
ISSUE DESCRIPTION When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that...
CVE-2026-86714 PX4 Autopilot through 1.17.0 Stack Buffer Over-read via netman
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console outp...
EUVD-2026-72690
PX4 Autopilot through 1.17.0 contains a stack buffer over-read vulnerability in the netman system command that fails to validate interface name length. Attackers can supply interface names of 74 bytes or more via the -i option to read beyond buffer boundaries, leaking stack memory to console outp...
Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)
Summary IBM Db2 is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
K000163238: OpenSSL vulnerability CVE-2026-54876
Security Advisory Description Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per T...
etherleak-checker
Etherleak 漏洞检查器 此 Python 脚本通过分析网络数据包中的填充数据,帮助检测目标主机上的 Etherleak CVE-2003-0001 漏洞。该脚本使用 Scapy 发送各种类型的请求(ICMP、ARP 或 TCP),并检查响应中是否包含可能泄漏敏感内存内容的填充数据。 Etherleak 概述 Etherleak 是一种网络驱动程序使用残留内存错误地填充以太网帧的漏洞。攻击者可以通过发送特定请求(ICMP、ARP 或 TCP)并分析响应数据包,来检查它们是否泄漏了系统内存中的敏感数据。 前提条件 Python 3.x 或更高版本 Scapy:你可以使用 pip 安装...
NewStart CGSL MAIN 7.02 : kernel Multiple Vulnerabilities (NS-SA-2026-0086)
The remote NewStart CGSL host, running version MAIN 7.02, has kernel packages installed that are affected by multiple vulnerabilities: - In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabufexpfrompages dmabuffd fixes; no preferences regarding the tree it goes...