Lucene search
K

74057 matches found

Github Security Blog
Github Security Blog
added 2026/04/24 4:39 p.m.13 views

ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width

DecimalConverter.ReadDecimal makes a stackalloc using what might be an attacker-supplied value. If an attacker declares a decimal column with some unreasonable width, this could lead to a stack overflow. In a service environment, this would potentially take down a service. This affects applicatio...

5.3CVSS5.3AI score0.00273EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/04/24 4:39 p.m.5 views

GHSA-RRJR-V56M-WW88 ParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width

DecimalConverter.ReadDecimal makes a stackalloc using what might be an attacker-supplied value. If an attacker declares a decimal column with some unreasonable width, this could lead to a stack overflow. In a service environment, this would potentially take down a service. This affects applicatio...

5.3CVSS5.9AI score0.00273EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2026/04/24 3:44 p.m.148 views

IMF-1-walkthrough

IMF: 1 — Boot2Root Walkthrough Platform: VulnHub Diff...

7.4AI score
Exploits0
SUSE Linux
SUSE Linux
added 2026/04/24 11:45 a.m.4 views

Security update for librsvg

This update for librsvg fixes the following issue: CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257922. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...

8.7CVSS5.3AI score0.00291EPSS
Exploits0References4
OSV
OSV
added 2026/04/24 11:45 a.m.4 views

SUSE-SU-2026:1599-1 Security update for librsvg

This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257922...

6.8CVSS5.4AI score0.00291EPSS
Exploits0References3
CVE
CVE
added 2026/04/24 5:50 a.m.16 views

CVE-2026-1949

Delta Electronics AS320T is affected by CVE-2026-1949 due to an incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service. The available reports identify the host device and the vulnerable component as the AS320T web service handling GET/PUT requests,...

9.8CVSS6AI score0.00611EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/24 5:50 a.m.26 views

CVE-2026-1949 Incorrect calculation of buffer size on the stack in AS320T

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

9.8CVSS0.00611EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/24 5:50 a.m.3 views

CVE-2026-1949

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

9.8CVSS6AI score0.00611EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/24 5:50 a.m.5 views

CVE-2026-1949 Incorrect calculation of buffer size on the stack in AS320T

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

9.8CVSS5.4AI score0.00611EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/24 5:50 a.m.7 views

EUVD-2026-25396

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service...

9.8CVSS6AI score0.00611EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2026/04/24 1:34 a.m.5 views

SUSE CVE-2026-6862

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that each node's Length field is at least 4 bytes, which is the minimum size for an EFI Extensible Firmware Interface device path node header. A local user could exploit this...

5.5CVSS5.7AI score0.00104EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.7 views

Delta Electronics AS320T 安全漏洞

Delta Electronics AS320T is a high-performance programmable logic controller device for industrial automation control from Delta Electronics China. The Delta Electronics AS320T suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking of file names. An...

9.8CVSS6.5AI score0.00307EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.10 views

BACnet Stack 缓冲区错误漏洞

BACnet Stack is an open-source protocol stack for BACnet, designed to work on embedded systems, Linux, MacOS, BSD, and Windows. Versions prior to BACnet Stack 1.4.3 contained a buffer error vulnerability. This vulnerability stems from a boundary-crossing read issue in the ReadPropertyMultiple...

8.7CVSS6AI score0.00401EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.6 views

PT-2026-35074

Name of the Vulnerable Software and Affected Versions BACnet Stack versions prior to 1.4.3 Description An out-of-bounds read exists in the WritePropertyMultiple service decoder. This occurs because the wpm decode object property function calls the deprecated decode tag number and value function,...

8.7CVSS5.6AI score0.00482EPSS
Exploits1References4
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.7 views

BACnet Stack 缓冲区错误漏洞

BACnet Stack is an open-source protocol stack for BACnet, designed for use in embedded systems, Linux, MacOS, BSD, and Windows. Versions prior to BACnet Stack 1.4.3 contained a buffer error vulnerability. This vulnerability stems from a out-of-bounds read vulnerability in the decoder of the...

9.1CVSS6AI score0.00482EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/24 12:0 a.m.6 views

openSUSE 16 Security Update : librsvg (openSUSE-SU-2026:20610-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20610-1 advisory. This update for librsvg fixes the following issue: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack...

6.8CVSS5.6AI score0.00291EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/24 12:0 a.m.4 views

SUSE SLES12 Security Update : perl (SUSE-SU-2026:1567-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:1567-1 advisory. This update for perl fixes the following issue: - CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow bsc1262486. Tenable has...

10CVSS5.6AI score0.00641EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.8 views

rust-openssl 安全漏洞

rust-openssl is an open-source library designed for interacting with the OpenSSL library. There were security vulnerabilities in the version of rust-openssl from 0.10.39 to 0.10.78. These vulnerabilities stemmed from the EVPDigestFinal function, which always writes EVPMDCTXsize bytes into the...

9.8CVSS6AI score0.00373EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/24 12:0 a.m.58 views

BACnet Stack 缓冲区错误漏洞

BACnet Stack is an open-source protocol stack for BACnet, designed to work on embedded systems, Linux, MacOS, BSD, and Windows. Versions prior to BACnet Stack 1.4.3 contained a buffer error vulnerability. This vulnerability stems from a out-of-bounds read vulnerability in the ReadPropertyMultiple...

8.7CVSS6AI score0.00415EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/24 12:0 a.m.8 views

PT-2026-37182

Name of the Vulnerable Software and Affected Versions ParquetSharp versions 18.1.0 through 23.0.0 Description ParquetSharp is a .NET library used for reading and writing Apache Parquet files. The ReadDecimal function in DecimalConverter performs a stackalloc operation using a value that can be...

5.3CVSS5.8AI score0.00273EPSS
Exploits0References5
Rows per page
Query Builder