Lucene search
+L

101851 matches found

Cvelist
Cvelist
•added 2026/09/22 7:48 p.m.•56 views

CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

9.8CVSS0.00775EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/22 7:48 p.m.•18 views

CVE-2026-87121

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

9.8CVSS6.2AI score0.00775EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2026/09/22 7:48 p.m.•21 views

CVE-2026-87121

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

9.8CVSS6.2AI score0.00775EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/22 7:48 p.m.•21 views

CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

9.8CVSS6.2AI score0.00775EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:48 p.m.•22 views

EUVD-2026-84816

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

9.8CVSS6.2AI score0.00775EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2026/09/22 7:18 p.m.•27 views

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

7.5CVSS5.9AI score0.00568EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/22 7:18 p.m.•33 views

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

7.5CVSS6.1AI score0.00568EPSS
SaveExploits0References8
NVD
NVD
•added 2026/09/22 7:16 p.m.•21 views

CVE-2026-83962

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00337EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•20 views

CVE-2026-75676

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00337EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/22 7:16 p.m.•17 views

CVE-2026-63386

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

5.3CVSS0.00361EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:00 p.m.•21 views

EUVD-2026-84801

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

5.3CVSS6AI score0.00361EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 7:00 p.m.•17 views

CVE-2026-63386 js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

5.3CVSS5.9AI score0.00361EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/22 7:00 p.m.•10 views

CVE-2026-63386

js-toml is a TOML parser for JavaScript. Prior to 1.1.3, load does not bound nesting or dotted-key depth in the recursive parser at src/load/parser.ts or the interpreter at src/load/interpreter.ts, so deeply nested arrays, deeply nested inline tables, or long dotted keys can exhaust the V8 call...

6.9CVSS5.9AI score0.00361EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/22 6:57 p.m.•52 views

CVE-2026-83962 Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS0.00337EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 6:57 p.m.•21 views

EUVD-2026-84796

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/22 6:57 p.m.•20 views

CVE-2026-83962 Substance3D - Modeler | Stack-based Buffer Overflow (CWE-121)

Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/22 6:57 p.m.•36 views

CVE-2026-83962

The software Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability (CWE-121). This flaw could allow an attacker to achieve arbitrary code execution within the context of the current user. Practical exploitation requires user interaction , specifically when a victim open...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/09/22 6:56 p.m.•19 views

CVE-2026-95818

A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...

7CVSS6.2AI score0.00102EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/22 6:52 p.m.•18 views

CVE-2026-75676 Bridge | Stack-based Buffer Overflow (CWE-121)

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/22 6:52 p.m.•19 views

EUVD-2026-84775

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

7.8CVSS7.7AI score0.00337EPSS
SaveExploits0References1
Rows per page
Query Builder