Lucene search
+L

10171 matches found

Redos
Redos
•added 2026/04/01 12:00 a.m.•53 views

ROS-20260401-73-0011

A vulnerability in the pngimagereaddirectscaled function of the libpng library is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information or cause denial of service...

7.1CVSS6.8AI score0.00222EPSS
SaveExploits1
Redos
Redos
•added 2026/04/01 12:00 a.m.•21 views

ROS-20260401-73-0009

A vulnerability in the pngimagereaddirectscaled function of the libpng library is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information or cause denial of service...

7.1CVSS6.8AI score0.00222EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•18 views

Amazon Linux 2023 : perl-YAML-Syck, perl-YAML-Syck-tests (ALAS2023-2026-1517)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1517 advisory. YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high- severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names...

9.1CVSS8AI score0.00625EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-32877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•122 views

SUSE SLES15: freerdp / freerdp-devel / freerdp-proxy / freerdp-server / etc (SUSE-SU-2026:1160-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1160-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp...

9.8CVSS6.8AI score0.00667EPSS
SaveExploits5References19
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•34 views

Amazon Linux 2 : ImageMagick, --advisory ALAS2-2026-3211 (ALAS-2026-3211)

The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3211 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions...

9.8CVSS6.6AI score0.00807EPSS
SaveExploits0References86
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•13 views

Linux kernel Memory driver Buffer Overflow DoS

The vulnerability of the writeoobto regs function in the drivers/mtd/nand/raw/brcmnand/brcmnand.c file of the Linux kernel’s memory driver relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00164EPSS
SaveExploits0References20Affected Software3
GithubExploit
GithubExploit
•added 2026/03/31 4:23 p.m.•191 views

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

🔍 CVE-2026-3055 Scanner - NetScaler Memory Overread Detection...

9.8CVSS5.8AI score0.04042EPSS
SaveExploits7
GithubExploit
GithubExploit
•added 2026/03/31 4:07 p.m.•217 views

Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit !...

9.8CVSS7.3AI score0.04042EPSS
SaveExploits7
SUSE Linux
SUSE Linux
•added 2026/03/31 3:04 p.m.•17 views

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages c...

8.8CVSS7.2AI score0.00667EPSS
SaveExploits5References24
osv_suse
osv_suse
•added 2026/03/31 3:03 p.m.•9 views

SUSE-SU-2026:1160-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. - CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. - CVE-2026-31806: improper validation of server...

9.8CVSS7.1AI score0.00667EPSS
SaveExploits5References13
BDU FSTEC
BDU FSTEC
•added 2026/03/31 12:00 a.m.•22 views

Linux kernel BPF Heap Buffer Overflow DoS

The vulnerability of the btfnamevalidsection function in the kernel/bpf/btf.c module, which is part of the BPF interpreter support for the Linux operating system, involves reading beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to access protected information...

7.1CVSS6.8AI score0.00218EPSS
SaveExploits0References9Affected Software2
osv_debian
osv_debian
•added 2026/03/30 9:17 p.m.•43 views

DEBIAN-CVE-2026-32877

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2026/03/30 9:17 p.m.•17 views

ALPINE-CVE-2026-32877

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/03/30 9:17 p.m.•15 views

CVE-2026-32877

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS7.1AI score0.00502EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/30 8:36 p.m.•67 views

CVE-2026-32877

CVE-2026-32877 affects Botan (C++ crypto library). From version 2.3.0 up to but not including 3.11.0, SM2 decryption incorrectly checked the length of the encoded C3 value before comparison, allowing an invalid ciphertext to cause a heap over-read of up to 31 bytes. This can lead to a crash or po...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/03/30 8:36 p.m.•13 views

CVE-2026-32877

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2026/03/30 8:36 p.m.•22 views

CVE-2026-32877 Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/03/30 8:36 p.m.•27 views

EUVD-2026-17210

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS7.2AI score0.00502EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/30 8:36 p.m.•38 views

CVE-2026-32877 Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value C3 failed to check that the encoded value was of the expected length prior to comparison. An invalid ciphertext can cause a heap over-read o...

8.2CVSS0.00502EPSS
SaveExploits0References1
Rows per page
Query Builder