Lucene search
+L

7600 matches found

NVD
NVD
added 2026/02/02 9:15 a.m.18 views

CVE-2026-20407

In wlan STA driver, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00464377; Issue ID: MSV-4905...

9.3CVSS0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.21 views

vLLM 日志信息泄露漏洞

vLLM is an open-source solution designed for LLM-based systems, featuring high throughput and memory-efficient reasoning and service engines. Versions of vLLM from 0.8.3 to 0.14.1 contained a vulnerability related to log information leakage. This vulnerability occurred due to the exposure of heap...

9.8CVSS7.1AI score0.03723EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.18 views

PT-2026-5670

Memory Corruption when user space address is modified and passed to mem free API, causing kernel memory to be freed inadvertently...

7.8CVSS5.3AI score0.00095EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.17 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. Qualcomm Chipsets have a resource management vulnerability, which stems from the modification of user-space addresses and their transmission to the memfree API. This can lead to the accidental release of kernel memory...

7.8CVSS5.8AI score0.00095EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/30 10:07 p.m.6 views

CVE-2020-37043

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

9.8CVSS6.6AI score0.00753EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/30 10:07 p.m.5 views

CVE-2020-37043 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling...

9.8CVSS6.8AI score0.00753EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/30 10:10 a.m.14 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS5.9AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/30 12:00 a.m.21 views

PT-2026-5483

Name of the Vulnerable Software and Affected Versions 10-Strike Bandwidth Monitor version 3.9 Description The software contains a buffer overflow issue that allows attackers to bypass SafeSEH, ASLR, and DEP protections. Exploitation occurs through crafted input sent to the application’s...

9.8CVSS6.7AI score0.00753EPSS
SaveExploits0References5
NVD
NVD
added 2026/01/29 9:16 a.m.21 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS0.00339EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/29 9:16 a.m.11 views

CVE-2026-23569

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...

7.5CVSS5.8AI score0.00339EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/29 12:00 a.m.17 views

PT-2026-5256

Name of the Vulnerable Software and Affected Versions TeamViewer DEX Client versions prior to 26.1 Description An out-of-bounds read issue exists in the TeamViewer DEX Client formerly 1E Client - Content Distribution Service NomadBranch.exe on Windows. A crafted request can trigger this issue,...

7.5CVSS5.5AI score0.00339EPSS
SaveExploits0References7
OSV
OSV
added 2026/01/28 6:16 p.m.12 views

CVE-2020-36964

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

8.7CVSS6.1AI score0.00412EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/28 5:35 p.m.16 views

EUVD-2020-30885

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/28 5:35 p.m.4 views

CVE-2020-36964

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/28 5:35 p.m.44 views

CVE-2020-36964 YATinyWinFTP - Denial of Service

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS0.00412EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/28 5:35 p.m.7 views

CVE-2020-36964 YATinyWinFTP - Denial of Service

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
CVE
CVE
added 2026/01/28 5:35 p.m.21 views

CVE-2020-36964

YATinyWinFTP is affected by a Denial of Service vulnerability. A remote attacker can crash the FTP service by connecting and sending a 272-byte buffer with a trailing space, which triggers a buffer overflow and service crash. Technical details indicate the issue is network-accessible with high CV...

9.8CVSS6.1AI score0.00412EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/01/28 4:33 p.m.8 views

Malicious Package

Overview @awan7715/model-viewer-space-opera is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.9AI score
SaveExploits0References2
Snyk
Snyk
added 2026/01/28 4:33 p.m.12 views

Malicious Package

Overview model-viewer-space-opera is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS5.9AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/28 3:18 p.m.21 views

CVE-2025-41728

A low privileged remote attacker may be able to disclose confidential information from the memory of a privileged process by sending specially crafted calls to the Device Manager web service that cause an out-of-bounds read operation under certain circumstances due to ASLR and thereby potentially...

5.3CVSS5.8AI score0.00328EPSS
SaveExploits0References1
Rows per page
Query Builder