Lucene search
+L

10171 matches found

Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•28 views

PT-2026-33836

Name of the Vulnerable Software and Affected Versions OVN affected versions not specified Description A flaw in OVN Open Virtual Network allows a remote attacker to cause the ovn-controller to perform an out-of-bounds read by sending crafted DHCPv6 Dynamic Host Configuration Protocol for IPv6...

8.6CVSS7.9AI score0.00879EPSS
SaveExploits0References58
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•22 views

Belkin F9K1122 FormWISP5G Code Execution

The vulnerability of the formWISP5G function /goform/formWISP5G of the Belkin F9K1122 Wi-Fi range extender software relates to the reading of data beyond the buffer in memory during the processing of the webpage parameter. Exploiting this vulnerability could allow a malicious actor to execute...

9CVSS7.8AI score0.01058EPSS
SaveExploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•21 views

WebAudio Component Disclosure

The vulnerability of the WebAudio component in the Google Chrome browser for Mac operating systems involves reading data beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information by sending a specially crafted HTML page...

7.8CVSS8.2AI score0.00281EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•16 views

Qualcomm Execution Outside Buffer Memory Corruption

The vulnerability of embedded software developed by Qualcomm relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause damage to the memory...

7.8CVSS6.1AI score0.00075EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/04/10 10:59 p.m.•18 views

perl: Heap-based buffer read overflow in S_grok_bslash_N()

Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory...

9.1CVSS7.1AI score0.09524EPSS
SaveExploits1References4
osv_opensuse
osv_opensuse
•added 2026/04/10 6:29 p.m.•12 views

OPENSUSE-SU-2026:20512-1 Security update for pcre2

This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in matchref due to missing boundary restoration in SCS bsc1248842...

9.1CVSS7.5AI score0.008EPSS
SaveExploits1References2
osv_suse
osv_suse
•added 2026/04/10 6:27 p.m.•21 views

SUSE-SU-2026:21172-1 Security update for pcre2

This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in matchref due to missing boundary restoration in SCS bsc1248842...

9.1CVSS7.5AI score0.008EPSS
SaveExploits1References3
osv_suse
osv_suse
•added 2026/04/10 6:27 p.m.•11 views

SUSE-SU-2026:21094-1 Security update for pcre2

This update for pcre2 fixes the following issue: - CVE-2025-58050: integer overflow leads to heap buffer overread in matchref due to missing boundary restoration in SCS bsc1248842...

9.1CVSS7.5AI score0.008EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/04/10 12:30 a.m.•21 views

EUVD-2026-21218

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00347EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/04/10 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-5772

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY...

5.3CVSS6AI score0.00347EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/10 12:00 a.m.•19 views

png_write_image_16bit PNG Buffer Overflow DoS

The vulnerability of the pngwriteimage16bit and pngwriteimage8bit functions in the PNG bitmap graphics handling library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.8CVSS7.1AI score0.00134EPSS
SaveExploits0References25Affected Software12
Tenable Nessus
Tenable Nessus
•added 2026/04/10 12:00 a.m.•11 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-007089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007089 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, MAT decoder uses 32-bit...

4.8CVSS6.1AI score0.00306EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/04/09 11:08 p.m.•24 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the MatchDomainName function during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. An attacker can cause a crash by supplying a crafted hostname that exhausts the entire string, resulting ...

5.3CVSS5.9AI score0.00347EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/09 10:16 p.m.•26 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS0.00347EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/04/09 10:16 p.m.•32 views

DEBIAN-CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS6AI score0.00347EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/09 10:16 p.m.•13 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS6AI score0.00347EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/04/09 10:16 p.m.•18 views

UBUNTU-CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

5.3CVSS6AI score0.00347EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/09 9:50 p.m.•68 views

CVE-2026-5772

The CVE-2026-5772 issue is a 1-byte stack buffer over-read in wolfSSL’s MatchDomainName (src/internal.c) when validating wildcards with LEFT_MOST_WILDCARD_ONLY; if a wildcard exhausts the hostname, one byte past the buffer is read without bounds checking, potentially crashing the process. Evidenc...

5.3CVSS6AI score0.00347EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/04/09 9:50 p.m.•11 views

CVE-2026-5772

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00347EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/09 9:50 p.m.•10 views

CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

A 1-byte stack buffer over-read was identified in the MatchDomainName function src/internal.c during wildcard hostname validation when the LEFTMOSTWILDCARDONLY flag is active. If a wildcard exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check,...

2.1CVSS6AI score0.00347EPSS
SaveExploits0References1
Rows per page
Query Builder