Lucene search
+L

77904 matches found

NVD
NVD
added 2026/04/29 3:16 p.m.11 views

CVE-2026-36837

TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...

7.5CVSS0.00267EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/29 2:22 p.m.84 views

CVE-2026-7111

Text::CSV_XS for Perl prior to 1.62 is affected by a use-after-free when callbacks extend the Perl argument stack. The Parse, print, getline, and getline_all methods cache the stack pointer across calls; if a callback triggers stack reallocation, a stale pointer is used to write a return value, c...

8.4CVSS5.5AI score0.00158EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/04/29 2:22 p.m.46 views

CVE-2026-7111 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

0.00158EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/04/29 2:22 p.m.17 views

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS5.6AI score0.00158EPSS
SaveExploits0
EUVD
EUVD
added 2026/04/29 2:22 p.m.13 views

EUVD-2026-26237

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS5.5AI score0.00158EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/29 2:22 p.m.6 views

CVE-2026-7111 Text::CSV_XS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

8.4CVSS6AI score
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/04/29 2:22 p.m.4 views

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

5.5AI score0.00158EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/29 1:21 p.m.21 views

JLSEC-2026-297

HDF5 through 1.14.3 contains a stack buffer overflow in H5Rdecodeheap, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

9.8CVSS7.5AI score0.00858EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/29 1:21 p.m.16 views

JLSEC-2026-304

HDF5 Library through 1.14.3 allows stack consumption in the function H5Eprintfstack in H5Eint.c...

7.5CVSS7.1AI score0.00796EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/29 1:21 p.m.19 views

JLSEC-2026-291

HDF5 through 1.14.3 contains a stack buffer overflow in H5FLarrmalloc, resulting in the corruption of the instruction pointer and causing denial of service or potential code execution...

7.4CVSS7.5AI score0.00223EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/29 11:04 a.m.13 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact...

9.8CVSS8.2AI score0.48211EPSS
SaveExploits9Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/29 9:07 a.m.7 views

Security Bulletin: IBM Engineering Lifecycle Management - Jazz Foundation is impacted by vulnerabilities in Json-smart

Summary A vulnerability has been identified in Json-smart library, which is used in IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION:Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON...

7.5CVSS6.3AI score0.01119EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2026/04/29 8:50 a.m.22 views

BIT-THRIFT-2026-41606 Apache Thrift: c_glib dispatch stack overflow

Uncontrolled Recursion vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue...

7.5CVSS5.3AI score0.01101EPSS
SaveExploits0References13
OSV
OSV
added 2026/04/29 7:08 a.m.17 views

CLSA-2026-1777446517 squid: Fix of 3 CVEs

CVE-2019-12521: fix ESI parser off-by-one heap overflow by enforcing a stack-depth limit and throwing on overflow - CVE-2019-12524 already addressed by the CVE-2019-12520 backport same fix upstream; see Squid advisory SQUID-2019:4...

9.8CVSS7.2AI score0.05765EPSS
SaveExploits0References1
CloudLinux
CloudLinux
added 2026/04/29 7:08 a.m.18 views

squid: Fix of 3 CVEs

CVE-2019-12521: fix ESI parser off-by-one heap overflow by enforcing a stack-depth limit and throwing on overflow - CVE-2019-12524 already addressed by the CVE-2019-12520 backport same fix upstream; see Squid advisory SQUID-2019:4...

9.8CVSS6.8AI score0.05765EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/29 12:00 a.m.16 views

Wazuh 安全漏洞

Wazuh is an open-source application developed by Wazuh. It is used for collecting, summarizing, indexing, and analyzing security data, helping organizations detect intrusions, threats, and abnormal behaviors. Versions of Wazuh from 4.8.0 to 4.14.4 contained security vulnerabilities. These...

8.2CVSS6.7AI score0.00382EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.14 views

PT-2026-36012

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 15.0-RELEASE-p7 FreeBSD versions prior to 14.4-RELEASE-p3 FreeBSD versions prior to 14.3-RELEASE-p12 FreeBSD versions prior to 13.5-RELEASE-p13 FreeBSD versions from 2013 through 13.4.x Description An operator...

7.8CVSS6AI score0.00179EPSS
SaveExploits1References25
BDU FSTEC
BDU FSTEC
added 2026/04/29 12:00 a.m.9 views

The vulnerability of the __sta_infodestroy_part1() function in the net/mac80211/sta_info.c module, part of the mac80211 stack in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stainfodestroypart1 function in the net/mac80211/stainfo.c module, part of the mac80211 stack in the Linux operating system, is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

7CVSS6AI score0.00229EPSS
SaveExploits0References22Affected Software4
Positive Technologies
Positive Technologies
added 2026/04/29 12:00 a.m.23 views

PT-2026-35947

Name of the Vulnerable Software and Affected Versions SonicOS affected versions not specified Description A post-authentication stack-based buffer overflow allows a remote attacker to crash a firewall. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the...

4.9CVSS5.9AI score0.00504EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/29 12:00 a.m.16 views

CVE-2026-36837

TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...

5.7AI score0.00267EPSS
SaveExploits0References1
Rows per page
Query Builder