Lucene search
+L

78322 matches found

OSV
OSV
added 2026/03/10 5:52 p.m.11 views

CVE-2026-30983 iccDEV has a stack buffer overflow in icFixXml()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml strcpy causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/10 5:52 p.m.8 views

CVE-2026-30983

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml strcpy causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/03/10 5:52 p.m.44 views

CVE-2026-30983 iccDEV has a stack buffer overflow in icFixXml()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml strcpy causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS0.00142EPSS
SaveExploits0References4
CVE
CVE
added 2026/03/10 5:52 p.m.21 views

CVE-2026-30983

ICC Dev (iccDEV) contains a stack-based overflow in icFixXml(), caused by strcpy, affecting the icFixXml() path prior to version 2.3.1.5. The vulnerability can lead to stack memory corruption or a crash and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with LOCAL exploitability an...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
added 2026/03/10 5:52 p.m.13 views

EUVD-2026-10726

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml strcpy causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/03/10 5:52 p.m.5 views

CVE-2026-30983 iccDEV has a stack buffer overflow in icFixXml()

iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a stack buffer overflow in icFixXml strcpy causing stack memory corruption or crash. This vulnerability is fixed in 2.3.1.5...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References4
Microsoft Security Update
Microsoft Security Update
added 2026/03/10 5:00 p.m.22 views

2026-03 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5078737)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

5.8AI score
SaveExploits0
SUSE Linux
SUSE Linux
added 2026/03/10 4:46 p.m.10 views

Security update for python-maturin

This update for python-maturin fixes the following issue: CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257918. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate ...

8.7CVSS5.8AI score0.00291EPSS
SaveExploits0References4
OSV
OSV
added 2026/03/10 4:46 p.m.5 views

SUSE-SU-2026:0860-1 Security update for python-maturin

This update for python-maturin fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257918...

6.8CVSS5.8AI score0.00291EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/10 4:44 p.m.6 views

CVE-2026-24640

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection a...

6.6CVSS6.1AI score0.00632EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/10 4:44 p.m.37 views

CVE-2026-24640

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0.2 through 7.0.12 may allow a remote authenticated attacker who can bypass stack protection a...

6.6CVSS0.00632EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/10 4:44 p.m.34 views

CVE-2026-24640

Fortinet FortiWeb CVE-2026-24640 is a stack-based buffer overflow (CWE-121) exploitable via crafted HTTP requests. A remote authenticated attacker who can bypass stack protections and ASLR may execute arbitrary code. Affected: FortiWeb 8.0.0–8.0.2; 7.6.0–7.6.6; 7.4 (all); 7.2 (all); 7.0.2–7.0.12....

6.6CVSS6.1AI score0.00632EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/10 4:44 p.m.41 views

CVE-2025-54820

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is...

8.1CVSS0.0087EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/10 4:44 p.m.7 views

CVE-2025-54820

A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is...

8.1CVSS5.9AI score0.0087EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/10 4:44 p.m.13 views

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

6.6CVSS6.5AI score0.00632EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/10 4:44 p.m.19 views

CVE-2026-30897

CVE-2026-30897 concerns a stack-based buffer overflow in Fortinet FortiWeb, affecting FortiWeb versions 8.0.0–8.0.3, 7.6.0–7.6.6, 7.4.0–7.4.11, and 7.2 (all versions). An authenticated remote attacker who can bypass stack protections and ASLR can exploit crafted HTTP requests to achieve arbitrary...

6.6CVSS6.5AI score0.00632EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/10 4:44 p.m.4 views

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

6.6CVSS6.5AI score0.00632EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/10 4:44 p.m.42 views

CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote authenticated attacker who can bypass stack protection and ASLR to execute...

6.6CVSS0.00632EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/10 4:37 p.m.6 views

CVE-2026-30939

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

8.8CVSS5.8AI score0.0049EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/10 4:07 p.m.4 views

CVE-2026-25572

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The SICAM SIAPP SDK server component does not enforce maximum length checks on certain variables before use. This could allow an attacker to send an oversized input that could trigger a stack overflow crashing the process...

5.9CVSS5.8AI score0.00119EPSS
SaveExploits0References1
Rows per page
Query Builder