Lucene search
+L

75816 matches found

ATTACKERKB
ATTACKERKB
added 2026/07/03 7:15 p.m.11 views

CVE-2026-14605

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS6.2AI score0.00141EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/03 7:15 p.m.12 views

EUVD-2026-41562

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS7.4AI score0.00141EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/03 7:15 p.m.30 views

CVE-2026-14605

CVE-2026-14605 affects RT-Thread up to 5.0.2. The vulnerability is in the function recvmsg within bsp/loongson/ls1cdev/libraries/ls1c_can.h of the ls1c CAN Handler . It enables a stack-based buffer overflow when processing input, with local access required to exploit. Public exploit code exists. ...

8.5CVSS7.4AI score0.00141EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/03 7:15 p.m.8 views

CVE-2026-14605 RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS7.4AI score
SaveExploits0References8
OSV
OSV
added 2026/07/03 12:17 p.m.4 views

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

8.2CVSS6AI score0.00559EPSS
SaveExploits9References21
RedHat Linux
RedHat Linux
added 2026/07/03 9:43 a.m.6 views

vim: Vim: Denial of Service via crafted spell file

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash...

5.5CVSS6AI score0.0012EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/07/03 3:4 a.m.8 views

SUSE CVE-2026-53343

In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commit 44e9a3bb76e5 "ARM: 9430/1: entry: Do a dummy read from VMAP shadow" added a dummy read from the KASAN VMAP stack shadow in switchto. The read uses ldr, but the...

5.8AI score0.00114EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/03 3:2 a.m.8 views

SUSE CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References7
SUSE Linux
SUSE Linux
added 2026/07/02 10:36 p.m.11 views

Security update for apache2

This update for apache2 fixes the following issues CVE-2026-29167: modldap per-dir use-after-free bsc1267976. CVE-2026-29170: modproxyftp XSS bsc1267977. CVE-2026-34355: modproxyhtml buffer overflow bsc1267978. CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow...

9.2CVSS6.2AI score0.27984EPSS
SaveExploits8References52
OSV
OSV
added 2026/07/02 8:26 p.m.6 views

GHSA-63WG-WJJJ-7CP8 Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node listens on the default :: address on a Linux host the standard deployment configuration — net.ipv6.bindv6only=0 is the default on all common Linux distributions. 3. Your node is synced near the chain tip...

7.5CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/07/02 5:36 p.m.6 views

SUSE-SU-2026:2731-1 Security update for editorconfig-core-c

This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: improper use of strcpy can lead to a stack buffer overflow bsc1262131...

8.6CVSS6.2AI score0.00151EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
added 2026/07/02 8:4 a.m.8 views

ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow

...

7.1CVSS6.1AI score0.00114EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.16 views

Oracle Linux 9 : rrdtool (ELSA-2026-34156)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34156 advisory. 1.7.2-22 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 Tenable has extracted the preceding description block...

7.8CVSS6.2AI score0.00132EPSS
SaveExploits0References2
Redos
Redos
added 2026/07/02 12:0 a.m.8 views

ROS-20260702-73-0023

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.2CVSS6.6AI score0.00259EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-54500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj.load in :object mode reads uninitialized stack...

5.3CVSS5.6AI score0.00198EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/07/02 12:0 a.m.10 views

Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость графической библиотеки Skia браузера Google Chrome связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

10CVSS5.8AI score0.00352EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-55594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check i...

5.3CVSS5.2AI score0.00241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/01 11:1 p.m.10 views

CVE-2026-55594

A flaw was found in ImageMagick, free and open-source software for editing and manipulating digital images. A missing depth check in the MVG Magick Vector Graphics decoder can lead to a stack overflow when a remote attacker provides a specially crafted image. This vulnerability could result in a...

5.3CVSS5.8AI score0.00241EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/01 9:19 p.m.8 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the MVG decoder. An attacker can cause a stack overflow by providing a specially crafted image file. Remediation A fix was pushed into the master branch but not yet published...

6.9CVSS6AI score0.00241EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/01 9:19 p.m.11 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder