Lucene search
+L

39356 matches found

CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•22 views

NanaZip security vulnerability

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1698.0 contained security vulnerabilities. These vulnerabilities stemmed from the GetAllPaths function in the UFS/UFS2 file system image parser, which allowed recursive subdirectories without...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•26 views

NanaZip security vulnerability

NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1698.0 contained security vulnerabilities. These vulnerabilities stemmed from the recursive, depth-unlimited behavior of the nlohmann::json::parse and GetAllPaths functions in the Electron...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•49 views

PT-2026-39993

A vulnerability has been identified in Solid Edge SE2026 All versions V226.0 Update 5. The affected applications contain a stack based overflow vulnerability while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

7.8CVSS6AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•24 views

PT-2026-40214

Stack-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

7.8CVSS5.9AI score0.00333EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•25 views

Siemens Solid Edge security vulnerabilities

Siemens Solid Edge is a 3D CAD software developed by the German company Siemens. This software can be used for parts design, assembly design, sheet metal design, welding design, and other industries. Versions of Siemens Solid Edge prior to SE2026 V226.0 Update 5 contained security vulnerabilities...

7.8CVSS8.1AI score0.00155EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•24 views

Adobe After Effects security vulnerabilities

Adobe After Effects is a visual effects and dynamic graphics production software developed by Adobe, Inc. This software is primarily used for 2D and 3D compositing, animation production, and visual special effects. Versions of Adobe After Effects such as 26.0, 25.6.4, and earlier versions have...

7.8CVSS7.8AI score0.00337EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•23 views

HPE Aruba Networking Wireless Operating System security vulnerabilities

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There are security vulnerabilities in the HPE Aruba Networking Wireless Operating System. These vulnerabilities stem from stack buffer overflows in several underlying...

7.2CVSS7AI score0.00621EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•42 views

HPE Aruba Networking Wireless Operating System security vulnerabilities

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There are security vulnerabilities in the HPE Aruba Networking Wireless Operating System. These vulnerabilities stem from stack buffer overflows in several underlying...

7.2CVSS7AI score0.00621EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•52 views

HPE Aruba Networking Wireless Operating System security vulnerabilities

HPE Aruba Networking Wireless Operating System is a wireless network operating system developed by the American company HPE. There are security vulnerabilities in the HPE Aruba Networking Wireless Operating System. These vulnerabilities stem from stack buffer overflows in several underlying...

7.2CVSS7AI score0.00621EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•29 views

Arduino-Esp32 security vulnerabilities

Arduino-ESP32 is an open-source project by Espressif, designed for use with the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6, and ESP32-H2 boards. Versions of Arduino-ESP32 prior to 3.3.8 contained a security vulnerability. This vulnerability stemmed from the WebServer multi-part form parser’s...

9.8CVSS6.4AI score0.00828EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•44 views

PT-2026-45607

Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions prior to 2.5.3-170306 Description A stack-based buffer overflow occurs in the /goform/formTaskEdit file due to the improper use of the strcpy function. This allows a remote attacker to cause a denial of service DoS,...

9CVSS7.7AI score0.00472EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•63 views

PT-2026-45608

Name of the Vulnerable Software and Affected Versions UTT HiPER 1200GW versions prior to 2.5.3-170306 Description A stack-based buffer overflow occurs in the strcpy function within the /goform/formFireWall file. This issue is triggered by the manipulation of the Profile argument, allowing for...

9CVSS7.6AI score0.00472EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•28 views

PT-2026-40368

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.00621EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•7 views

CVE-2026-1681: Uncontrolled Recursion

Issuing an ICMP ping via the net ping shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue stack. Because the destination is recognized as a local address, both the echo request and the resulting echo reply are...

6.1CVSS6AI score0.00144EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•29 views

PT-2026-40365

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.00621EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•30 views

PT-2026-40367

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending...

7.2CVSS6.4AI score0.00621EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/05/12 12:00 a.m.•46 views

KB5087539: Windows Server 2025 Security Update (May 2026)

The remote Windows host is missing security update 5087539 or hotpatch 5087423. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-41096 - Stack-based buffer overflow...

9.8CVSS7.3AI score0.02229EPSS
SaveExploits49References66
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•24 views

PT-2026-40535

Name of the Vulnerable Software and Affected Versions protobufjs versions prior to 7.5.6 protobufjs versions prior to 8.0.2 Description An issue exists in the decoding process of nested protobuf data where the library can recurse without a depth limit. This affects the generated decoding of neste...

7.8CVSS7.5AI score0.00684EPSS
SaveExploits0References21
UbuntuCve
UbuntuCve
•added 2026/05/11 8:25 p.m.•15 views

CVE-2026-42050

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/05/11 8:25 p.m.•19 views

UBUNTU-CVE-2026-42050

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References3
Rows per page
Query Builder