Lucene search
+L

126 matches found

Positive Technologies
Positive Technologies
•added 2026/05/17 12:00 a.m.•34 views

PT-2026-54410

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in the Network component allows a remote attacker who has compromised the renderer process to perform UI spoofing through a crafted HTML page...

6.4CVSS6.4AI score0.00218EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/07 2:00 p.m.•24 views

Chromium: CVE-2026-7947 Insufficient validation of untrusted input in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.7AI score0.00221EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/06 6:12 p.m.•55 views

CVE-2026-7947

Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00221EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/06 6:12 p.m.•51 views

CVE-2026-7947

Google Chrome and Microsoft Edge are affected by a vulnerability in the Network component due to insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can exploit this to perform UI spoofing using a crafted HTML page. The issue impacts ver...

4.2CVSS5.8AI score0.00221EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/06 6:12 p.m.•16 views

CVE-2026-7947

Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00221EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
•added 2026/01/21 12:00 a.m.•20 views

Swift W3C TraceContext vulnerable to a malformed HTTP header causing a crash

A denial-of-service vulnerability due to improper input validation allows a remote attacker to crash the service via a malformed HTTP header. Allows crashing the process with data coming from the network when used with, for example, an HTTP server. Most common way of using Swift W3C Trace Context...

5.3CVSS6AI score0.00455EPSS
SaveExploits0References7Affected Software1
GithubExploit
GithubExploit
•added 2026/01/13 9:59 p.m.•179 views

Buffer-Overflow-Shellcode-Exploitation

Buffer Overflow & Shellcode Exploitation Overview This pr...

8.4AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-26166

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.0053EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-24855

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00775EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/27 10:15 p.m.•16 views

CVE-2025-34523

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

9.8CVSS0.0053EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/08/27 9:19 p.m.•12 views

CVE-2025-34523

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

9.8CVSS6.5AI score0.00556EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/27 9:19 p.m.•6 views

CVE-2025-34523 Arcserve UDP < 10.2 Pre-Authentication Heap Overflow

A heap-based buffer overflow vulnerability exists in the network-facing input handling routines of Arcserve Unified Data Protection UDP. This flaw is reachable without authentication and results from improper bounds checking when processing attacker-controlled input. By sending specially crafted...

9.2CVSS6.5AI score0.0053EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/27 12:00 a.m.•13 views

Arcserve Unified Data Protection 安全漏洞

Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection versions prior to 10.2 that stems from a heap buffer overflow in network input processing, which could result in a denial of servi...

9.8CVSS8.1AI score0.0053EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/16 9:26 a.m.•26 views

CVE-2025-54472

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

7.5CVSS7.5AI score0.01261EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 10:10 a.m.•18 views

CVE-2019-1010258

nanosvg library nanosvg after commit c1f6e209c16b18b46aa9f45d7e619acf42c29726 is affected by: Buffer Overflow. The impact is: Memory corruption leading to at least DoS. More severe impact vectors need more investigation. The component is: it's part of a svg processing library. function...

6.5CVSS7AI score0.01771EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/02/10 12:00 a.m.•21 views

Azure Linux 3.0 Security Update: libsoup (CVE-2024-52531)

The version of libsoup installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52531 advisory. - GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in...

8.4CVSS7.4AI score0.0068EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2024/11/12 1:13 a.m.•18 views

CVE-2024-52531

A flaw was found in the libsoup library. Decoding specially crafted UTF-8 input data with the soupheaderparseparamliststrict function can cause a heap-based buffer overflow, potentially resulting in code execution and denial of service to applications linked to the library. Mitigation Red Hat has...

9CVSS8.3AI score0.0068EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/11 8:15 p.m.•26 views

CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

8.4CVSS0.0068EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/11 12:00 a.m.•57 views

CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

6.5CVSS0.0068EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/11/11 12:00 a.m.•16 views

CVE-2024-52531

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soupheaderparseparamliststrict. There is a plausible way to reach this remotely via soupmessageheadersgetcontenttype e.g., an application may want to retrieve the content type of a request or...

6.5CVSS7.5AI score0.0068EPSS
SaveExploits1References4
Rows per page
Query Builder