Lucene search
+L

1233 matches found

RedhatCVE
RedhatCVE
added 2026/04/27 12:48 p.m.11 views

CVE-2026-42371

A flaw was found in uriparser. This vulnerability occurs due to numeric truncation in text range comparison when an application processes extremely long Uniform Resource Identifiers URIs, specifically those with lengths in gigabytes. A local attacker could exploit this flaw by providing a...

5.1CVSS5.3AI score0.00172EPSS
SaveExploits0References5
NVD
NVD
added 2026/04/27 7:16 a.m.32 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00172EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/04/27 7:16 a.m.11 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/27 7:16 a.m.9 views

UBUNTU-CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/04/27 5:50 a.m.6 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/04/27 5:50 a.m.12 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/04/27 5:50 a.m.55 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS0.00172EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/27 5:50 a.m.12 views

EUVD-2026-25776

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/27 5:50 a.m.8 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.9AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:50 a.m.8 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/04/27 5:50 a.m.18 views

CVE-2026-42371

uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes...

5.1CVSS5.2AI score0.00172EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.11 views

Uriparser 安全漏洞

UriParser is a C89-compatible library for parsing and processing URIs, strictly conforming to RFC 3986 standards. Versions of UriParser prior to 1.0.1 contained security vulnerabilities, which were caused by numerical truncation during text range comparisons...

5.1CVSS5.8AI score0.00172EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.16 views

PT-2026-35358

Name of the Vulnerable Software and Affected Versions uriparser versions prior to 1.0.1 Description Numeric truncation occurs during text range comparison when an application accepts URIs with a length in gigabytes. This issue is characterized as an integer overflow, which happens when a numeric...

9.8CVSS5.8AI score0.00894EPSS
SaveExploits1References49
EUVD
EUVD
added 2026/04/22 12:31 a.m.11 views

EUVD-2026-24550

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References8
NVD
NVD
added 2026/04/21 11:16 p.m.9 views

CVE-2026-5512

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error...

5.3CVSS0.00296EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/04/21 10:12 p.m.6 views

CVE-2026-5512 Improper authorization vulnerability in GitHub Enterprise Server allowed disclosure of private repository names via mobile upload policy API

An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error...

5.3CVSS5.8AI score0.00296EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/04/21 5:31 p.m.6 views

brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges

A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high...

7.5CVSS6.6AI score0.003EPSS
SaveExploits0References5
CNVD
CNVD
added 2026/04/15 12:0 a.m.14 views

Adobe Framemaker Numeric Error Vulnerability (CNVD-2026-19994)

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to cause arbitrary...

7.8CVSS6AI score0.00173EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/15 12:0 a.m.16 views

Adobe Framemaker Numeric Error Vulnerability (CNVD-2026-19995)

Adobe Framemaker is a professional desktop publishing software for creating and editing large technical documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to cause arbitrary code to be executed in the current user's environment...

7.8CVSS6AI score0.00173EPSS
SaveExploits0
CNVD
CNVD
added 2026/04/15 12:0 a.m.9 views

Adobe Bridge Numeric Error Vulnerability

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from a numeric error vulnerability that can be exploited by an attacker to cause a denial of service in the application...

5.5CVSS5.8AI score0.00178EPSS
SaveExploits0
Rows per page
Query Builder