Lucene search
+L

75791 matches found

NVD
NVD
added 2026/07/28 1:19 p.m.11 views

CVE-2026-66920

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, while the JSON viewer recursively processed each level of a node’s data structure. A specially crafted graph containing a...

8.2CVSS0.00253EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/28 1:11 p.m.6 views

CVE-2026-54272

A flaw was found in the ip-address library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery SSRF due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassificatio...

7.2CVSS5.8AI score0.00254EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/28 12:57 p.m.10 views

CVE-2026-66920

Pivotick is affected by an uncontrolled-recursion vulnerability in its graph processing and JSON viewer components. The issue arises when processing caller-supplied graph and node data, where recursive traversals over edges and node structures can exhaust the JavaScript call stack on specially cr...

8.2CVSS5.9AI score0.00253EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/28 12:57 p.m.6 views

CVE-2026-66920 Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, while the JSON viewer recursively processed each level of a node’s data structure. A specially crafted graph containing a...

8.2CVSS5.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/28 12:32 p.m.7 views

CVE-2026-62433 correct buffer checks for DM_OP hypercalls

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

5.9AI score0.00263EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2026/07/28 12:32 p.m.9 views

CVE-2026-62433

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

7.3CVSS5.9AI score0.00263EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/28 12:32 p.m.10 views

CVE-2026-62433

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

5.9AI score0.00263EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/28 12:32 p.m.6 views

EUVD-2026-49786

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

7.3CVSS5.9AI score0.00263EPSS
SaveExploits0References1
Xen Project
Xen Project
added 2026/07/28 12:0 p.m.9 views

correct buffer checks for DM_OP hypercalls

ISSUE DESCRIPTION Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized. IMPACT A device model of a...

7.3CVSS5.9AI score0.00263EPSS
SaveExploits0Affected Software1
Ubuntu
Ubuntu
added 2026/07/28 6:43 a.m.12 views

USN-8616-1: Linux kernel (IBM) vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

9.8CVSS7.1AI score0.93235EPSS
SaveExploits48
RedhatCVE
RedhatCVE
added 2026/07/28 5:42 a.m.4 views

CVE-2026-16418

A flaw was found in Chromium. A stack buffer overflow vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page, potentially leading to a complete...

8.8CVSS6.5AI score0.00271EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-64539

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer size, 31 for the legacy...

7.8CVSS5.7AI score0.00122EPSS
SaveExploits0References4
NVD
NVD
added 2026/07/27 9:17 p.m.8 views

CVE-2026-64539

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...

7.8CVSS0.00122EPSS
SaveExploits0References5
NVD
NVD
added 2026/07/27 9:17 p.m.9 views

CVE-2026-43771

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service...

7.1CVSS0.00145EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/27 8:14 p.m.8 views

EUVD-2026-49424

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service...

5.9AI score0.00145EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/27 8:14 p.m.30 views

CVE-2026-43771

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to cause a denial-of-service...

0.00145EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/27 8:14 p.m.20 views

CVE-2026-43771

CVE-2026-43771 involves a stack overflow that was fixed by improved input validation. Affected macOS versions are Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, where an app may crash the system (DoS) via this issue. Remediation is to apply the fixed updates (Sequoia 15.7.8, Sonoma 14.8.8, Tahoe ...

7.1CVSS5.9AI score0.00145EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/07/27 8:10 p.m.8 views

CVE-2026-64539

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...

7.8CVSS5.8AI score0.00122EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/27 8:10 p.m.6 views

EUVD-2026-49590

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...

5.7AI score0.00122EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/27 8:10 p.m.6 views

CVE-2026-64539 Bluetooth: eir: Fix stack OOB write when prepending the Flags AD

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...

7.8CVSS5.7AI score
SaveExploits0References8
Rows per page
Query Builder