Lucene search
+L

35560 matches found

OSV
OSV
added 2026/08/05 9:11 a.m.5 views

SUSE-SU-2026:23145-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...

5.3AI score
SaveExploits0References5
OSV
OSV
added 2026/08/05 8:51 a.m.5 views

SUSE-SU-2026:23121-1 Security update for php8

This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...

9.8CVSS5.8AI score0.00522EPSS
SaveExploits4References9
OSV
OSV
added 2026/08/05 8:51 a.m.6 views

SUSE-SU-2026:23144-1 Security update for php8

This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...

9.8CVSS5.8AI score0.00522EPSS
SaveExploits4References9
NVD
NVD
added 2026/08/05 7:16 a.m.13 views

CVE-2026-67552

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

7.5CVSS0.00483EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 7:16 a.m.12 views

CVE-2026-68073

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

7.5CVSS0.00483EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/05 7:16 a.m.12 views

CVE-2026-66274

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

7.5CVSS0.00493EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/05 7:16 a.m.6 views

UBUNTU-CVE-2026-67590

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/05 6:44 a.m.49 views

CVE-2026-61486 Apache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed input

UNSUPPORTED WHEN ASSIGNED Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance ...

0.00566EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 6:44 a.m.46 views

CVE-2026-61486

Technical details about CVE-2026-61486 are not publicly available in the provided documents. The sources consistently note that Apache Lucy is retired and no fix is planned; monitor for updates.

9.8CVSS5.4AI score0.00566EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/05 6:36 a.m.43 views

CVE-2026-61483 Apache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS

UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to...

0.00522EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 6:36 a.m.49 views

CVE-2026-61483

CVE-2026-61483 affects Apache Lucy (all versions). The entry describes an Uncontrolled Recursion vulnerability in the QueryParser that can lead to a C-stack overflow DoS when processing deeply-nested queries. The issue is tied to Apache Lucy being retired; there will be no fixed release, and guid...

7.5CVSS5.4AI score0.00522EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/05 5:33 a.m.40 views

CVE-2026-67590 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

0.00493EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:33 a.m.48 views

CVE-2026-67590

CVE-2026-67590 affects Apache Qpid ProtonJ2 (versions up to 1.1.0). The issue is an unbounded type nesting that can be triggered pre-authentication, causing a StackOverflowError and potential denial of service. A fix is available in version 1.2.0. No exploitation details are provided in the sourc...

7.5CVSS5.4AI score0.00493EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/05 5:33 a.m.14 views

CVE-2026-67590 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

7.5CVSS5.3AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/05 5:33 a.m.10 views

EUVD-2026-53085

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue...

5.4AI score0.00493EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 5:32 a.m.10 views

EUVD-2026-53084

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

5.5AI score0.00483EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:32 a.m.46 views

CVE-2026-67552

Apache Qpid Proton-Dotnet (up to version 1.0.0) is affected by CVE-2026-67552 due to unbounded type nesting that can cause a pre-authentication StackOverflowError, potentially leading to denial of service. The vulnerability arises from excessive nesting in type handling and does not require user ...

7.5CVSS5.5AI score0.00483EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/08/05 5:32 a.m.6 views

CVE-2026-67552 Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue...

7.5CVSS5.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/05 5:32 a.m.7 views

CVE-2026-68073 Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication stack overflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

5.4AI score0.00483EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/05 5:32 a.m.8 views

EUVD-2026-53083

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the issue...

5.4AI score0.00483EPSS
SaveExploits0References1
Rows per page
Query Builder