Lucene search
+L

91763 matches found

NVD
NVD
•added 2026/09/29 12:17 p.m.•17 views

CVE-2026-102495

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

7.5CVSS0.00528EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/29 12:17 p.m.•13 views

CVE-2026-102496

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

7.5CVSS0.00528EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/29 12:17 p.m.•12 views

CVE-2026-102497

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

7.5CVSS0.00528EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 12:08 p.m.•7 views

EUVD-2026-88758

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

9.3CVSS6.2AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 12:08 p.m.•18 views

CVE-2026-7192

The Dbit T-CPE301K 4G Mini WiFi Router is susceptible to a stack-based buffer overflow vulnerability. An authenticated attacker can trigger a denial of service (DoS) and a system reboot by sending a manipulated HTTP POST request to the /js/common/do_cmd.js endpoint. The vulnerability is caused by...

9.3CVSS6.2AI score0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 12:08 p.m.•9 views

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

9.3CVSS6.2AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 12:08 p.m.•42 views

CVE-2026-7192 Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

9.3CVSS0.00257EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/09/29 11:46 a.m.•9 views

Security update for python310

This update for python310 fixes the following issues: CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL...

6.3CVSS6.1AI score0.00721EPSS
SaveExploits0References20
GithubExploit
GithubExploit
•added 2026/09/29 11:42 a.m.•22 views

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063: Exploitation, Detection & Mitigation Lab O...

9.8CVSS6.5AI score0.70564EPSS
SaveExploits27
CVE
CVE
•added 2026/09/29 11:34 a.m.•11 views

CVE-2026-102497

The Apache XmlSchema walker (xmlschema-walker) is vulnerable to a denial of service because it fails to detect cycles in type derivation, substitution groups, model groups, or attribute groups. A malicious schema containing such cycles can cause the walker to recurse indefinitely until a stack ov...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/09/29 11:34 a.m.•10 views

EUVD-2026-88739

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 11:34 a.m.•42 views

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

0.00528EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 11:34 a.m.•6 views

CVE-2026-102497 Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

The Apache XmlSchema walker xmlschema-walker doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service. Users are recommended to upgrade t...

5.8AI score0.00528EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 11:34 a.m.•41 views

CVE-2026-102496 Apache XMLSchema: Denial of service through deeply nested schema structures

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

0.00528EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 11:34 a.m.•22 views

CVE-2026-102496

Apache XmlSchema is vulnerable to a Denial of Service (DoS) due to a lack of depth limits when building its schema model. A remote attacker can provide a crafted XML schema with deeply nested elements, triggering uncontrolled recursion that leads to a stack overflow and crashes the application. T...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/29 11:34 a.m.•7 views

CVE-2026-102496 Apache XMLSchema: Denial of service through deeply nested schema structures

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

5.8AI score0.00528EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 11:34 a.m.•7 views

EUVD-2026-88738

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 11:33 a.m.•7 views

EUVD-2026-88737

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue...

7.5CVSS5.8AI score0.00528EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/29 9:36 a.m.•9 views

ROOT-OS-ALPINE-317-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root

Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.17. Multiple fixed versions available...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/29 9:30 a.m.•11 views

CVE-2026-96415 Stack-based Buffer Overflow in Wireshark

Catapult DCT2000 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...

5.5CVSS5.8AI score0.0014EPSS
SaveExploits0References2
Rows per page
Query Builder