Lucene search
+L

189 matches found

Kitploit
Kitploit
•added 2026/11/12 4:47 p.m.•50 views

CVE-2022-46152

CVE-2022-46152 OP-TEE OScleanupshmrefs Out-of-Bounds Read — Reproduction Environment Reference: https://optee.readthedocs.io/en/latest/building/devices/qemu.htmlqemu-v8 Security Advisory: https://github.com/OP-TEE/opteeos/security/advisories/GHSA-65w8-6mrg-52g7 Vulnerability Overview Field| Detai...

8.8CVSS8.1AI score0.00491EPSS
SaveExploits1References1
NVD
NVD
•added 2026/11/10 8:17 p.m.•3 views

CVE-2026-0195

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS0.00123EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/11/10 7:20 p.m.•23 views

CVE-2026-0195

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00123EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/10 7:20 p.m.•4 views

EUVD-2026-122699

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00123EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•3 views

PT-2026-144422

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00123EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/11/06 4:41 a.m.•1 views

Astra Linux – vulnerability in linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is an u8 type; if it is already 0, the decrement still occurs and wraps ...

9.8CVSS6.3AI score0.006EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/11/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-121943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/11/04 2:05 p.m.•9 views

CVE-2026-121943

A flaw was found in sngrep. An out-of-bounds stack read vulnerability exists due to an off-by-one length check when parsing Session Initiation Protocol SIP payloads. A remote attacker could exploit this by sending a crafted network packet or supplying a malicious packet capture file, resulting in...

6.3CVSS5.9AI score0.05551EPSS
SaveExploits0References7
NVD
NVD
•added 2026/11/04 1:17 p.m.•10 views

CVE-2026-121943

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS0.05551EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/11/04 1:17 p.m.•11 views

DEBIAN-CVE-2026-121943

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/11/04 12:31 p.m.•13 views

CVE-2026-121943 Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References4
CVE
CVE
•added 2026/11/04 12:31 p.m.•17 views

CVE-2026-121943

The Irontec sngrep tool (versions through 1.9.0 ) is vulnerable to an out-of-bounds stack read in the sip_check_packet and sip_validate_packet functions. This is caused by an off-by-one length check when processing 10240-byte SIP payloads . A remote attacker can exploit this by sending a crafted ...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/11/04 12:31 p.m.•12 views

EUVD-2026-116900

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/11/04 12:31 p.m.•5 views

CVE-2026-121943 Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/11/04 12:31 p.m.•24 views

CVE-2026-121943 Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS0.05551EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/11/04 12:00 a.m.•5 views

UBUNTU-CVE-2026-121943

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/04 12:00 a.m.•9 views

CVE-2026-121943: irontec sngrep: Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sip_check_packet and…

Irontec sngrep through 1.9.0 contains an out-of-bounds stack read vulnerability in sipcheckpacket and sipvalidatepacket caused by an off-by-one length check on 10240-byte SIP payloads. Remote attackers can send a crafted UDP or TCP SIP packet or supply a pcap file to crash sngrep or leak adjacent...

6.3CVSS5.8AI score0.05551EPSS
SaveExploits0References2
osv_pub
osv_pub
•added 2026/11/01 12:00 a.m.•17 views

PUB-A-511823274

In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.00123EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/10/30 12:41 a.m.•16 views

SUSE CVE-2026-115942

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommende...

5.8AI score0.0024EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/29 11:17 a.m.•17 views

AZL-111745 CVE-2026-115942 affecting package qpid-proton 0.40.0-15

A misconfigured wildcard TLS certificate causes a stack read overflow. This issue does not affect any wildcard certificate issued to the RFC9525 standard - the fix only accepts certificates that comply to this standard. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommende...

5.8AI score0.0024EPSS
SaveExploits0References1
Rows per page
Query Builder