152053 matches found
CVE-2019-12401
CVE-2019-12401: Apache Solr における XML爆弾 5.0.0より前のSolrバージョンは、そのアップデートハンドラを介してXMLリソース消費攻撃（別名 Lol Bomb）に対して脆弱です。 攻撃者はXML DOCTYPEおよびENTITYタイプ要素を利用して、サーバーがXMLを解析する際に展開され、OOMを引き起こすパターンを作成できます。 ベンダーの開示: この脆弱性に対するベンダーの開示と修正はこちらにあります。 概念実証: 詳細と悪用プロセスはこのPDFにあります。...
CVE-2020-8277
CVE-2020-8277 教育目的のみです。 クイック実行 root@kitploit: clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed version,...
zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uri
CVE-2026-10672 — Zephyr LwM2M 固件更新越界读取 PoC 针对 CVE-2026-10672 的概念验证，这是 Zephyr RTOS 的 LwM2M 固件更新拉取客户端（subsys/net/lib/lwm2m/lwm2mpullcontext.c）中的一个越界读取漏洞。 漏洞 CVE : CVE-2026-10672 CVSS : 8.2 高危 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L CWE : CWE-125 越界读取 组件 : lwm2mpullcontextstarttransfer in...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
kernel: dm-verity: fix buffer overflow in FEC calculation
A flaw was found in the dm-verity component of the Linux kernel. A buffer overflow occurs during Forward Error Correction FEC calculation, allowing an attacker to write past the end of an allocated buffer. This out-of-bounds write can corrupt the syndrome buffer, potentially leading to system...
Chromium CVE-2026-87596: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87592: Out of bounds read in Tint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87586: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87525: Out of bounds read in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
EUVD-2026-78162
A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...
Linux Distros Unpatched Vulnerability : CVE-2026-91958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors...
Linux Distros Unpatched Vulnerability : CVE-2026-91945
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an out-of-bounds read vulnerability in smartcard response decoders that fail to validate ATR length fields against fixed...
RockyLinux 10 : rust (RLSA-2026:67286)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67286 advisory. libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server CVE-2026-53587 Tenable has extracted the preceding description bloc...
Linux Distros Unpatched Vulnerability : CVE-2026-91951
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urbsendcurrentframenumberresult function. A malicious...
Linux Distros Unpatched Vulnerability : CVE-2026-91786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions...
RHEL 9 : kernel (RHSA-2026:67470)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67470 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vhost: move vdpa group bound...
PT-2026-92476
A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...
PT-2026-92475
A maliciously constructed IMAP line could cause an out-of-bounds buffer read. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...
Linux Distros Unpatched Vulnerability : CVE-2026-91956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.31.0 contains an out-of-bounds read vulnerability in the URBDRC channel's funcgetepdesc function that indexes interface arrays by position...
PT-2026-93144
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Critical...