Lucene search
+L

101913 matches found

BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•23 views

Windows TCP/IP Code Execution

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS7.9AI score0.00707EPSS
SaveExploits0References2Affected Software20
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-80634

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: flowtable: avoid numencaps underflow on bridge VLAN untag The DEVPATHBRVLANUNTAG case post-decrements info-numencaps inside WARNONONCE. numencaps is...

9.8CVSS5.8AI score0.006EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•27 views

Python Library OpenEXR 3.4.0 < 3.4.14 DoS (CVE-2026-68516)

The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.14. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the first tile outside the visible image can reach invalid tile and...

6.5CVSS5.9AI score0.00452EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/28 12:00 a.m.•22 views

Linux Distros Unpatched Vulnerability : CVE-2026-68516

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.1...

6.5CVSS6AI score0.00452EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•10 views

CVE-2026-19318: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

9.3CVSS7AI score0.00707EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•6 views

CVE-2026-80662: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXLHEADERLOGSIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXLRASCAPABILITYLENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18...

7.1CVSS6.3AI score0.00126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•13 views

PT-2026-86704

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL HEADERLOG SIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXL RAS CAPABILITY LENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18. CXL...

7.1CVSS6.3AI score0.00126EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•12 views

CVE-2026-5706: Improper Handling of Length Parameter Inconsistency

In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code execution. These messages must come from a device that has already joined the network. Only provisioners supporting extended advertisements may b...

8.9CVSS6.4AI score0.00391EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•19 views

Microsoft Office Buffer Overflow

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00466EPSS
SaveExploits0References2Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•14 views

CVE-2026-77218: Stack-based Buffer Overflow

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The webloginfirstpost handler copies the usrPass POST parameter into a fixed-size stack buffer without length validation, the websysenablePasswdpost handle...

6.9CVSS6.1AI score0.00572EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/28 12:00 a.m.•22 views

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

4.3CVSS6.4AI score0.00868EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•13 views

CVE-2026-75126: Stack-based Buffer Overflow

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation:...

6.9CVSS6.1AI score0.00602EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•9 views

CVE-2026-82343: Buffer Copy without Checking Size of Input

A flaw was found in the file-psd plugin in GIMP. When processing a specially crafted PSD image file, the plugin does not properly validate the channel-count parameter. This incorrect validation leads to improper memory bounds checking, resulting in both a heap out-of-bounds read and a stack...

6.1CVSS7.1AI score0.00183EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•13 views

CVE-2026-81533: Stack-based Buffer Overflow

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems...

7.1CVSS6AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/28 12:00 a.m.•34 views

PT-2026-83272

PLANET GS-4210-16P2S firmware before 3.441b260626 contains multiple authenticated stack buffer overflow vulnerabilities in /cgi-bin/dispatcher.cgi. The following handlers copy attacker-controlled POST parameters into fixed-size stack buffers without length validation: web vlan membership edit...

6.9CVSS6.2AI score0.00602EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•12 views

CVE-2026-67560: Stack-based Buffer Overflow

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...

7.7CVSS6.6AI score0.00334EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/28 12:00 a.m.•25 views

UBUNTU-CVE-2026-73209

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...

6.5CVSS7.1AI score0.00398EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•3 views

CVE-2026-73209: Uncontrolled Recursion

An attacker that has valid credentials can send crafted compressed data that causes the affected process to exhaust its stack and crash. The affected process is terminated, which can cause degradation or denial of service for IMAP. Update to non-vulnerable version. No publicly available exploits...

6.5CVSS7.2AI score0.00398EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/08/28 12:00 a.m.•24 views

UBUNTU-CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

4.3CVSS6.8AI score0.00868EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•12 views

CVE-2026-78010: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process iallows a remote unauthenticated attacker to create a Denial of Service DoS condition in VPN processing by sending specially crafted network traffic...

8.7CVSS6.3AI score0.00542EPSS
SaveExploits0References4
Rows per page
Query Builder