Lucene search
+L

35557 matches found

AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.6 views

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Staging: rtl8723bs: Fixed a stack buffer overflow issue during the parsing of the OnAssocReq IE. The length of the Supported Rates IE from an incoming Association Request frame was directly used as the length for the memcpy...

8.8CVSS7.1AI score0.0036EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.8 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: A stack-out-of-bounds write occurred in devmap. The getupperifindexes function iterates over all upper devices and writes their indices into an array without checking bounds. As a result, callers may assume that the maximum...

7.8CVSS6AI score0.00131EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.10 views

Astra Linux – Vulnerability in Capstone

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and earlier, a unchecked return from vsnprintf in SStreamconcat allowed a malicious csoptmem.vsnprintf to manipulate SStream’s index beyond its limit, resulting in a stack buffer underflow/overflow when the next write operation occurre...

9.8CVSS7.4AI score0.00196EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-66485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based ...

4.6CVSS5.4AI score0.00132EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-68184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmcioctlcdromvolume first reads the audio control mode page into a 32-byte stack buffer with cgc-buflen set ...

5.7AI score0.0021EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/10 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-68159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libceph: bound pgtemp,upmap,upmapitems length to CEPHPGMAXSIZE decodepgtemp decodes an user- controlled length but only rejects values large enough to overflow...

9.8CVSS5.7AI score0.00553EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/09 7:17 a.m.9 views

CVE-2026-19341

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

9CVSS0.00441EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/09 7:00 a.m.38 views

CVE-2026-19341 UTT HiPER 1200GW pptpSrvGlobalConfig strcpy stack-based overflow

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

9CVSS0.00441EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/09 7:00 a.m.13 views

EUVD-2026-54910

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

9CVSS8.7AI score0.00441EPSS
SaveExploits0References5
NVD
NVD
added 2026/08/07 8:16 p.m.13 views

CVE-2026-62295

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

7.5CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/07 8:03 p.m.21 views

CVE-2026-62296 HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...

7.5CVSS5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/07 8:03 p.m.29 views

CVE-2026-62296 HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nesting depth, so a deeply nested text.div narrative triggers unbounded recursion between parseElementInner and parseElement, raisi...

7.5CVSS0.00278EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/07 8:03 p.m.73 views

CVE-2026-62296

CVE-2026-62296 affects HAPI FHIR (Java). The vulnerable component is the XHTML parser (XhtmlParser.java) where, prior to 6.9.11, there is no maximum element nesting depth, allowing deeply nested text.div narratives to trigger unbounded recursion between parseElementInner() and parseElement(). Thi...

7.5CVSS5.3AI score0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/07 7:36 p.m.8 views

CVE-2026-62295 HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

7.5CVSS5.4AI score
SaveExploits0References4
CVE
CVE
added 2026/08/07 7:36 p.m.58 views

CVE-2026-62295

HAPI FHIR (Java) prior to 6.9.11 has a denial-of-service risk: the JSON parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth, so deeply nested, valid FHIR JSON can trigger unbounded readArray/readObject recursion and cause a StackOverflowError before validatio...

7.5CVSS5.3AI score0.00278EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/07 7:36 p.m.29 views

CVE-2026-62295 HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nesting depth for arrays or objects. As a result, a small but deeply nested,...

7.5CVSS0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/07 1:27 p.m.11 views

JLSEC-2026-1173 FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan...

FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...

8.8CVSS6AI score0.00457EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/07 2:47 a.m.12 views

OESA-2026-3312 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script.CVE-2026-38752 A use-after-free in the awksub function editors/awk.c of...

5.1CVSS5.6AI score0.00235EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/07 2:46 a.m.10 views

OESA-2026-3310 trafficserver security update

Apache Traffic Server is an OpenSource HTTP / HTTPS / HTTP/2 / QUIC reverse, forward and transparent proxy and cache. Security Fixes: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through...

9.2CVSS5.8AI score0.00734EPSS
SaveExploits1References39
Tenable Nessus
Tenable Nessus
added 2026/08/07 12:00 a.m.17 views

openSUSE 16: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (openSUSE-SU-2026:21532-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21532-1 advisory. This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks...

9.8CVSS6AI score0.00522EPSS
SaveExploits4References12
Rows per page
Query Builder