Lucene search
+L

41760 matches found

Snyk
Snyk
added 2026/06/05 4:46 p.m.13 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the SquashFS ReadBlock function. An attacker can cause disclosure of heap memory contents by providing a specially crafted SquashFS archive with a manipulated node.Offset value, which bypasses fragment bounds check...

8.1CVSS5.4AI score0.00324EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/05 3:18 p.m.14 views

JLSEC-2026-573

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file can trigger an out-of-bounds read in core sequence parsing logic, causing DoS. A malformed file can have stco.entrycount == 0 creating no chunks while still passing validation...

6.5CVSS6.1AI score0.00253EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/06/05 1:58 p.m.18 views

CVE-2026-49975

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

7.5CVSS5.5AI score0.31042EPSS
SaveExploits9References4
Circl
Circl
added 2026/06/05 1:23 p.m.20 views

CVE-2026-10955

creationtimestamp| type| source ---|---|--- 2026-06-05 13:23:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

8.8CVSS5.3AI score0.00381EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/05 12:45 p.m.7 views

CVE-2026-11330

A weakness has been identified in thedotmack claude-mem up to 11.0.1. The affected element is the function computeObservationContentHash of the file src/services/sqlite/observations/store.ts of the component Observation Content Hash Handler. This manipulation causes use of weak hash. The attack c...

3.6CVSS4.7AI score0.00075EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/06/05 12:04 p.m.14 views

RLSA-2026:22145 Important: .NET 10.0 security update

.NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. New versions of .NET that address a security vulnerability are now available. The updated versions are .NET SDK 10.0.108 and .NET Runtime...

7.5CVSS5.5AI score0.0243EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/05 11:11 a.m.14 views

OESA-2026-2558 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

9.8CVSS5.7AI score0.0052EPSS
SaveExploits4References5
GithubExploit
GithubExploit
added 2026/06/05 11:05 a.m.130 views

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

9.8CVSS6.4AI score0.79622EPSS
SaveExploits34
Hacker One
Hacker One
added 2026/06/05 3:50 a.m.24 views

curl: CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop

Summary: curl's QUIC UDP receive helper ignores zero-length UDP datagrams before counting them against the per-call packet budget. On Linux, recvmmsgpackets loops while pkts maxpkts, but if!mmsgi.msglen continue; runs before pkts is incremented. The recvmsgpackets backend has the same no-progress...

7.5CVSS5.9AI score0.00715EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2026/06/05 12:00 a.m.9 views

The vulnerability of the emac_dispatch_skb_zc() function in the network interface driver icssg-prueth of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the emacdispatchskbzc function in the network interface driver icssg-prueth of the Linux operating system is related to incorrect initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

10CVSS5.8AI score0.00308EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.27 views

PT-2026-51740

Name of the Vulnerable Software and Affected Versions cURL affected versions not specified libcurl affected versions not specified Description An issue in the QUIC UDP receive function allows a remote malicious HTTP/3 server to cause a denial of service. The helper function fails to count...

7.8CVSS6.7AI score0.00715EPSS
SaveExploits1References38
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.32 views

PT-2026-47052

Name of the Vulnerable Software and Affected Versions OpenXDMoD versions prior to 10.0.3 Description An SQL injection allows an unauthenticated remote attacker to execute arbitrary SQL statements. This can result in the complete compromise of the underlying database. The issue requires no...

9.8CVSS6AI score0.00479EPSS
SaveExploits0References9
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/05 12:00 a.m.14 views

tomcat-9.0.118-1.1 on GA media (moderate)

tomcat-9.0.118-1.1 on GA media Announcement ID: openSUSE-SU-2026:10925-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H...

8.7CVSS6.5AI score0.01563EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.26 views

Fedora 44 : perl-Crypt-Argon2 / perl-Dist-Build / perl-ExtUtils-Builder / etc (2026-dafdad8fd3)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-dafdad8fd3 advisory. Update to 0.031 2477035 2481131 fixes CVE-2026-8463 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

5.3CVSS5.5AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/05 12:00 a.m.18 views

DataDog::DogStatsd 安全漏洞

DataDog::DogStatsD is a Perl monitoring client library developed by DataDog Corporation that supports the DogStatsD protocol. Versions of DataDog::DogStatsD prior to 0.07 contained security vulnerabilities; these vulnerabilities stemmed from improper handling of inputs, allowing for the injection...

9.8CVSS5.4AI score0.00447EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/06/05 12:00 a.m.17 views

Open XDMoD 操作系统命令注入漏洞

Open XDMoD is an open-source tool developed by the Center for Computational Research for managing high-performance computing resources. Versions 9.5.0 to 11.0.2 of Open XDMoD contain a vulnerability related to operating system command injection. This vulnerability allows attackers to remotely...

9.8CVSS5.8AI score0.00388EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:00 a.m.52 views

Atlassian Jira Service Management Data Center and Server 5.15.2 < 10.3.20 / 10.4.x < 11.3.5 (JSDSERVER-16574)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16574 advisory. - The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior...

7.5CVSS6.3AI score0.0043EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/04 7:50 p.m.18 views

Improper Synchronization

Overview Affected versions of this package are vulnerable to Improper Synchronization in the process that forwards DoQ queries to UDP upstreams, where the DNS transaction ID txid is not preserved and is always set to 0, reducing entropy in the backend tuple. An attacker can increase the likelihoo...

6.9CVSS5.5AI score0.00122EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/06/04 7:50 p.m.9 views

Improper Synchronization

Overview Affected versions of this package are vulnerable to Improper Synchronization in the process that forwards DoQ queries to UDP upstreams, where the DNS transaction ID txid is not preserved and is always set to 0, reducing entropy in the backend tuple. An attacker can increase the likelihoo...

6.9CVSS5.5AI score0.00122EPSS
SaveExploits1References3
OSV
OSV
added 2026/06/04 7:50 p.m.42 views

GHSA-XGX4-4H9W-53PV AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle

Summary This report covers the client-triggered DoQ forwarding path in: - dnsproxy v0.81.2 adguard/dnsproxy:v0.81.2 - AdGuard Home v0.107.74 adguard/adguardhome:latest, image version label v0.107.74 The issue was reproduced on 2026-04-25 with the products configured through their documented DoQ...

6.9CVSS5.7AI score0.00122EPSS
SaveExploits1References5
Rows per page
Query Builder