Lucene search
+L

75817 matches found

Cvelist
Cvelist
added 2026/07/03 7:15 p.m.50 views

CVE-2026-14605 RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS0.00141EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/03 7:15 p.m.11 views

CVE-2026-14605

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS6.2AI score0.00141EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/03 7:15 p.m.12 views

EUVD-2026-41562

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS7.4AI score0.00141EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/03 7:15 p.m.30 views

CVE-2026-14605

CVE-2026-14605 affects RT-Thread up to 5.0.2. The vulnerability is in the function recvmsg within bsp/loongson/ls1cdev/libraries/ls1c_can.h of the ls1c CAN Handler . It enables a stack-based buffer overflow when processing input, with local access required to exploit. Public exploit code exists. ...

8.5CVSS7.4AI score0.00141EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/03 7:15 p.m.8 views

CVE-2026-14605 RT-Thread ls1c CAN ls1c_can.h recvmsg stack-based overflow

A vulnerability was identified in RT-Thread up to 5.0.2. Affected by this vulnerability is the function recvmsg in the library bsp/loongson/ls1cdev/libraries/ls1ccan.h of the component ls1c CAN Handler. Such manipulation leads to stack-based buffer overflow. Local access is required to approach...

8.5CVSS7.4AI score
SaveExploits0References8
OSV
OSV
added 2026/07/03 12:17 p.m.4 views

SUSE-SU-2026:22664-1 Security update for jq

This update for jq fixes the following issues: - CVE-2026-32316: integer overflow within the jvpstringappend and jvpstringcopyreplacebad functions can lead to heap buffer overflow when evaluating untrusted jq queries bsc1262044. - CVE-2026-33947: unbounded recursion in functions jvsetpath,...

8.2CVSS6AI score0.00559EPSS
SaveExploits9References21
RedHat Linux
RedHat Linux
added 2026/07/03 9:43 a.m.6 views

vim: Vim: Denial of Service via crafted spell file

A flaw was found in Vim, an open-source command-line text editor. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted spell file. This malicious file can trigger a stack out-of-bounds write, which corrupts the editor's memory and causes it to crash...

5.5CVSS6AI score0.0012EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2026/07/03 3:4 a.m.8 views

SUSE CVE-2026-53343

In the Linux kernel, the following vulnerability has been resolved: ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Commit 44e9a3bb76e5 "ARM: 9430/1: entry: Do a dummy read from VMAP shadow" added a dummy read from the KASAN VMAP stack shadow in switchto. The read uses ldr, but the...

5.8AI score0.00114EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/03 3:2 a.m.8 views

SUSE CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References7
SUSE Linux
SUSE Linux
added 2026/07/02 10:36 p.m.11 views

Security update for apache2

This update for apache2 fixes the following issues CVE-2026-29167: modldap per-dir use-after-free bsc1267976. CVE-2026-29170: modproxyftp XSS bsc1267977. CVE-2026-34355: modproxyhtml buffer overflow bsc1267978. CVE-2026-34356: malicious backend servers can lead to a heap-based buffer overflow...

9.2CVSS6.2AI score0.27984EPSS
SaveExploits8References52
OSV
OSV
added 2026/07/02 8:26 p.m.6 views

GHSA-63WG-WJJJ-7CP8 Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update

Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node listens on the default :: address on a Linux host the standard deployment configuration — net.ipv6.bindv6only=0 is the default on all common Linux distributions. 3. Your node is synced near the chain tip...

7.5CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/07/02 5:36 p.m.6 views

SUSE-SU-2026:2731-1 Security update for editorconfig-core-c

This update for editorconfig-core-c fixes the following issue: - CVE-2026-40489: improper use of strcpy can lead to a stack buffer overflow bsc1262131...

8.6CVSS6.2AI score0.00151EPSS
SaveExploits1References3
Microsoft CVE
Microsoft CVE
added 2026/07/02 8:4 a.m.8 views

ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow

...

7.1CVSS6.1AI score0.00114EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.16 views

Oracle Linux 9 : rrdtool (ELSA-2026-34156)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-34156 advisory. 1.7.2-22 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 Tenable has extracted the preceding description block...

7.8CVSS6.2AI score0.00132EPSS
SaveExploits0References2
Redos
Redos
added 2026/07/02 12:0 a.m.8 views

ROS-20260702-73-0023

The vulnerability of the dccperror function in the net/netfilter/nfconntrackprotodccp.c module of the netfilter component in the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.2CVSS6.6AI score0.00259EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-54500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj.load in :object mode reads uninitialized stack...

5.3CVSS5.6AI score0.00198EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/07/02 12:0 a.m.10 views

Уязвимость графической библиотеки Skia браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость графической библиотеки Skia браузера Google Chrome связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

10CVSS5.8AI score0.00352EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/07/02 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-55594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check i...

5.3CVSS5.2AI score0.00241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/01 11:1 p.m.10 views

CVE-2026-55594

A flaw was found in ImageMagick, free and open-source software for editing and manipulating digital images. A missing depth check in the MVG Magick Vector Graphics decoder can lead to a stack overflow when a remote attacker provides a specially crafted image. This vulnerability could result in a...

5.3CVSS5.8AI score0.00241EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/07/01 9:19 p.m.12 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score0.00241EPSS
SaveExploits0References2
Rows per page
Query Builder