Lucene search
+L

9990 matches found

Cvelist
Cvelist
added 2026/05/12 9:40 p.m.54 views

CVE-2026-42268 ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS0.00396EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2026/05/12 9:40 p.m.19 views

CVE-2026-42268

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS5.6AI score0.00396EPSS
SaveExploits1
EUVD
EUVD
added 2026/05/12 9:40 p.m.17 views

EUVD-2026-29854

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS5.6AI score0.00396EPSS
SaveExploits1References1
CVE
CVE
added 2026/05/12 9:40 p.m.40 views

CVE-2026-42268

ModSecurity (libmodsecurity3) versions 3.0.0–3.0.14 expose an unhandled std::out_of_range exception caused by an unsigned integer underflow when using the operators @verifySSN, @verifyCPF, or @verifySVNR. The vulnerability affects the WAF engine for Apache, IIS, and Nginx and is fixed in 3.0.15. ...

8.2CVSS5.6AI score0.00396EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/05/12 9:40 p.m.10 views

CVE-2026-42268 ModSecurity: Unsigned integer underflow in @verifySSN / @verifyCPF / @verifySVNR operators

ModSecurity is an open source, cross platform web application firewall WAF engine for Apache, IIS and Nginx. From 3.0.0 to before 3.0.15, there is an unhandled exception std::outofrange caused by unsigned integer underflow in libmodsecurity3 if the user administrator uses a rule any of @verifySSN...

8.2CVSS5.8AI score
SaveExploits0References3
EUVD
EUVD
added 2026/05/12 9:31 p.m.15 views

EUVD-2026-29774

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition...

6.2CVSS5.8AI score0.0026EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/12 9:31 p.m.18 views

EUVD-2026-29769

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition...

6.2CVSS5.8AI score0.00248EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/12 8:16 p.m.35 views

CVE-2026-34672

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS0.0026EPSS
SaveExploits0References1
NVD
NVD
added 2026/05/12 8:16 p.m.17 views

CVE-2026-34667

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/12 8:4 p.m.41 views

CVE-2026-34672 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/12 8:4 p.m.30 views

CVE-2026-34672

The CVE-2026-34672 issue affects CAI Content Credentials versions 0.78.2, 0.7.0 and earlier. The root cause is an Integer Underflow (wrap/wraparound) leading to an application denial-of-service, with exploitation possible without user interaction. The vulnerability can cause the application to cr...

6.2CVSS5.5AI score0.0026EPSS
SaveExploits0References1Affected Software2
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:4 p.m.9 views

CVE-2026-34672

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition...

6.2CVSS5.8AI score0.0026EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/12 8:4 p.m.10 views

CVE-2026-34672 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS5.5AI score0.0026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/12 8:3 p.m.9 views

CVE-2026-34667

CAI Content Credentials versions 0.78.2, 0.7.0 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition...

6.2CVSS5.8AI score0.00248EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/12 8:3 p.m.34 views

CVE-2026-34667

CAI Content Credentials (versions 0.78.2, 0.7.0 and earlier) are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that can crash the application and cause a denial-of-service. Exploitation does not require user interaction and is described as a local issue with a CVSS v3.1 base...

6.2CVSS5.5AI score0.00248EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2026/05/12 8:3 p.m.45 views

CVE-2026-34667 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/12 8:3 p.m.12 views

CVE-2026-34667 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Integer Underflow Wrap or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a...

6.2CVSS5.5AI score0.00248EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/12 6:30 p.m.31 views

EUVD-2026-29659

Integer underflow wrap or wraparound in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00273EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/12 6:30 p.m.16 views

EUVD-2026-29543

YAML::Syck versions before 1.38 for Perl has an out-of-bounds read. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both intbase60 and floatbase60 handlers. When processing the leftmost segment of a colon-separated value e.g., the 1 in 1:30:45, the inner while loop...

6AI score0.00333EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/12 6:17 p.m.13 views

CVE-2026-40397

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00273EPSS
SaveExploits0References1
Rows per page
Query Builder