Lucene search
+L

28780 matches found

Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.10 views

PT-2026-30762

Name of the Vulnerable Software and Affected Versions Strawberry GraphQL versions prior to 0.312.3 Description Strawberry GraphQL WebSocket subscription handlers for both the graphql-transport-ws and legacy graphql-ws protocols allocate an asyncio.Task and associated Operation object for every...

7.5CVSS5.2AI score0.00274EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/04/06 12:0 a.m.36 views

CVE-2026-30078

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome...

0.00292EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2026/04/06 12:0 a.m.25 views

CVE-2025-57835

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/06 12:0 a.m.6 views

CVE-2026-30078

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome...

7.5CVSS6.1AI score
SaveExploits0References4
CVE
CVE
added 2026/04/06 12:0 a.m.35 views

CVE-2025-57835

CVE-2025-57835 affects Samsung Exynos/Modem devices (e.g., Exynos 980/990/850/1080/2100/etc.) with RRC in Samsung Mobile Processor, Wearable Processor, and Modems. Root cause: improper memory initialization causing illegal memory access via a malformed RRCReconfiguration message, leading to a sys...

7.5CVSS5.9AI score0.00278EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.18 views

PT-2026-30691

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

5.9AI score0.00278EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-31409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: unset conn-binding on failed binding request When a multichannel SMB2SESSIONSETUP request with SMB2SESSIONREQFLAGBINDING fails ksmbd sets conn-binding =...

8.8CVSS6.6AI score0.00454EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/06 12:0 a.m.15 views

PT-2026-30703

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400 Description A Stack-based Buffer Overflow...

10CVSS5.9AI score0.0052EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2026/04/06 12:0 a.m.15 views

Car Rental System SQL注入漏洞

Car Rental System is a car rental system developed by AMEY THAKUR, an individual developer in India. Version 1.0 of Car Rental System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter “Message” in the file /messageadmin.php, which may lead to SQ...

7.5CVSS7.2AI score0.00259EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/05 9:30 p.m.10 views

EUVD-2019-20056

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS6.2AI score0.00228EPSS
SaveExploits1References4
NVD
NVD
added 2026/04/05 9:16 p.m.8 views

CVE-2019-25660

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS0.00228EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.5 views

CVE-2019-25660

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS6.2AI score0.00228EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/04/05 8:45 p.m.24 views

CVE-2019-25660 LanHelper 1.74 Denial of Service via Buffer Overflow

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS0.00228EPSS
SaveExploits1References3
CVE
CVE
added 2026/04/05 8:45 p.m.17 views

CVE-2019-25660

CVE-2019-25660 concerns LanHelper 1.74, with a local buffer overflow in the Form Send Message feature. The vulnerability allows an attacker to crash the application by supplying excessively long input strings (e.g., 6000 bytes in the Message text field), resulting in a denial-of-service condition...

6.9CVSS6.2AI score0.00228EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 8:45 p.m.4 views

CVE-2019-25660 LanHelper 1.74 Denial of Service via Buffer Overflow

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service...

6.9CVSS6.2AI score0.00228EPSS
SaveExploits1References3
Hacker One
Hacker One
added 2026/04/05 10:42 a.m.34 views

curl: CVE-2026-5773: wrong reuse of SMB connection

A vulnerability was discovered in curl version 8.19.0 and earlier versions that support SMB. The vulnerability was due to the incorrect reuse of SMB connections across different shares on the same server. This led to data spoofing and access control bypass. The issue was caused by the lack of...

7.5CVSS5.5AI score0.00618EPSS
SaveExploits1
EUVD
EUVD
added 2026/04/05 3:30 a.m.8 views

EUVD-2026-19017

A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is possible to be carried out remotely. The...

5.3CVSS5.4AI score0.00528EPSS
SaveExploits1References5
NVD
NVD
added 2026/04/05 3:16 a.m.9 views

CVE-2026-5535

A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is possible to be carried out remotely. The...

5.4CVSS0.00528EPSS
SaveExploits1References4
CVE
CVE
added 2026/04/05 2:45 a.m.26 views

CVE-2026-5536

FedML-AI prior to 0.8.9 contains a deserialization vulnerability in the gRPC server component, specifically the sendMessage function in grpc_server.py. The issue allows remote manipulation that can lead to deserialization of crafted input, potentially impacting confidentiality, integrity, and ava...

7.5CVSS6.7AI score0.00378EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/05 2:0 a.m.4 views

CVE-2026-5535 FedML-AI FedML MQTT Message FileUtils.java path traversal

A security flaw has been discovered in FedML-AI FedML up to 0.8.9. This impacts an unknown function of the file FileUtils.java of the component MQTT Message Handler. Performing a manipulation of the argument dataSet results in path traversal. The attack is possible to be carried out remotely. The...

5.3CVSS5.4AI score0.00528EPSS
SaveExploits1References4
Rows per page
Query Builder