Lucene search
+L

10176 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:14 a.m.•20 views

CVE-2022-33297

Information disclosure due to buffer overread in Linux sensors...

6.8CVSS7AI score0.00113EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:10 a.m.•16 views

CVE-2026-20027

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

5.3CVSS6.8AI score0.00596EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/09 12:00 a.m.•21 views

Siemens Ruggedcom ROX Improper Input Validation (CVE-2024-5642)

CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due to NPN being not...

9.1CVSS6.9AI score0.05582EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/01/08 3:14 a.m.•15 views

CVE-2025-15382

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

5.1CVSS6.2AI score0.00351EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/07 5:16 p.m.•19 views

CVE-2026-20027

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

5.3CVSS0.00596EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 4:23 p.m.•55 views

CVE-2026-20026 Multiple Cisco Products Snort 3 DCERPC Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

5.8CVSS0.00666EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/07 4:23 p.m.•43 views

CVE-2026-20027 Cisco Snort DCERPC Stub Data Out of Bounds Read

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to leak sensitive information or to restart, resulting in an interruption of packet inspection. This vulnerabili...

5.3CVSS0.00596EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:54 a.m.•34 views

CVE-2025-1400

Out-of-bounds Read vulnerability in unpackresponse conn.c in libplctag from 2.0 through 2.6.3 allows Overread Buffers via network...

3.1CVSS6.9AI score0.00242EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•31 views

PT-2026-2047

Name of the Vulnerable Software and Affected Versions Cisco products affected versions not specified Description A flaw exists in the processing of DCE/RPC requests that may allow a remote attacker to obtain sensitive information or cause the Snort 3 Detection Engine to restart, leading to an...

5.3CVSS6.6AI score0.00596EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2026/01/07 12:00 a.m.•8 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000310 advisory. A buffer over-read flaw was found in RH kernel versions before 5.0 in cryptoauthencextractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module,...

5.5CVSS6.5AI score0.0051EPSS
SaveExploits1References4
CVE
CVE
•added 2026/01/06 10:48 p.m.•56 views

CVE-2025-47395

CVE-2025-47395 concerns Qualcomm chipsets’ WLAN firmware. The issue is a transient denial-of-service that occurs while parsing a WLAN management frame containing a Vendor Specific Information Element. Impact is the potential disruption of service (availability) with no confidentiality/integrity l...

6.5CVSS5.8AI score0.00117EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/01/06 10:48 p.m.•57 views

CVE-2025-47331 Buffer Over-read in Video

Information disclosure while processing a firmware event...

6.1CVSS0.00079EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/06 10:48 p.m.•40 views

CVE-2025-47331

Technical details are not publicly available in the provided documents for CVE-2025-47331; monitor for updates.

6.1CVSS5.8AI score0.00079EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/06 10:48 p.m.•13 views

CVE-2025-47330 Buffer Over-read in Video

Transient DOS while parsing video packets received from the video firmware...

5.5CVSS5.8AI score0.00072EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/06 6:15 p.m.•20 views

CVE-2025-15382

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

8.1CVSS0.00351EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/01/06 5:43 p.m.•12 views

CVE-2025-15382 Client SCP Request Triggers Buffer Overread by 1 Byte

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

5.1CVSS6.2AI score
SaveExploits0References3
CVE
CVE
•added 2026/01/06 5:43 p.m.•36 views

CVE-2025-15382

The CVE-2025-15382 issue concerns wolfSSH_CleanPath() in wolfSSH. A heap buffer over-read is triggered by authenticated remote SCP path input containing '/./' sequences, leading to a one-byte heap over-read. Multiple sources (NVD, Red Hat, OSV, CVE listing) describe the vulnerability consistently...

8.1CVSS6.2AI score0.00351EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/06 5:43 p.m.•13 views

CVE-2025-15382 Client SCP Request Triggers Buffer Overread by 1 Byte

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

5.1CVSS6.2AI score0.00351EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/06 5:43 p.m.•50 views

CVE-2025-15382 Client SCP Request Triggers Buffer Overread by 1 Byte

A heap buffer over-read vulnerability exists in the wolfSSHCleanPath function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte...

5.1CVSS0.00351EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/06 12:00 a.m.•26 views

PT-2026-1498

Name of the Vulnerable Software and Affected Versions wolfSSH affected versions not specified Description A heap buffer over-read issue exists in the wolfSSH CleanPath function within wolfSSH. A remote attacker with authentication can trigger this by providing specially crafted SCP path input tha...

8.1CVSS6.1AI score0.00351EPSS
SaveExploits0References10
Rows per page
Query Builder