Все CVE за последние шесть месяцев, обновляются ежедневно.
Опубликованные уязвимости напрямую из National Vulnerability Database: критичность, класс CWE и затронутые продукты. Ищите, фильтруйте и смотрите, что появилось сегодня.
- За последние 24 часа: 403
- За последние 7 дней: 2 943
- За последние шесть месяцев: 58 226
Источник: NVD (National Vulnerability Database) · Обновлено 23 сент. 2026 г.
Показано 41 из 41
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit fields. A SIP body larger
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versi
Out-of-bounds read (buffer over-read) in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0 through 6.11.1, allows remote attackers to cause a denial of service (application crash) via an excess
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
CWE-197google chromeNumeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network.
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initia
An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was writt
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes s
nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression (homelen - 1) is
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public `cs_disasm()` and `cs_disasm_iter()` APIs. For a large but well-formed `br_table` instr
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.
A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an integer truncation when computing the length of the ACK record-number list, causing an undersized buffer to
LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken from the file was truncated to a 16-bit value when the point buffer was sized, while the full count was
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet. The relevant options ('nsid', 'answer-cookie', 'p
Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.
In uriparser before 1.0.2, there is pointer difference truncation to int in various places.
CWE-197uriparser_project uriparseruriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes.
CWE-197uriparser_project uriparser
Найдите уязвимость раньше атакующего.
Войдите через GitHub и запустите первый аудит меньше чем за минуту. Для бесплатного тарифа банковская карта не нужна.