CVE-2026-110912 | | | 2026-10-15 | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address… |
CVE-2026-92159 | Medium | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer… |
CVE-2026-101962 | High | 7.5 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2026-102054 | Medium | 4.3 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adja… |
CVE-2026-101994 | High | 7.1 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the
l2ald
daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attack… |
CVE-2026-101991 | Low | 3.1 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2026-101942 | High | 7.5 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evo… |
CVE-2026-90921 | High | 7.5 | 2026-10-12 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in te… |
CVE-2026-109390 | Critical | 9.8 | 2026-10-12 | AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command e… |
CVE-2026-83745 | | | 2026-10-02 | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift
nodejs and D lang bindings.
B… |
CVE-2026-94633 | | | 2026-10-02 | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings.
This issue af… |
CVE-2026-85494 | High | 7.5 | 2026-10-02 | Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initi… |
CVE-2026-94635 | | | 2026-10-02 | Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings.
This… |
CVE-2026-18397 | | | 2026-10-01 | This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory… |
CVE-2026-87022 | High | 7.5 | 2026-09-23 | Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used.
This… |
CVE-2026-77619 | | | 2026-09-22 | Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads a 32-bit compressed-frame length from the network… |
CVE-2023-5778 | High | 7.5 | 2026-09-18 | Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Controller AC700, ABB Freelance Controller AC8… |
CVE-2026-73455 | High | 7.5 | 2026-09-16 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to… |
CVE-2026-90678 | High | 7.5 | 2026-09-13 | An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with Q… |
CVE-2026-15418 | | | 2026-09-10 | In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 14… |
CVE-2026-71337 | High | 7.8 | 2026-09-08 | Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally. |
CVE-2026-5706 | | | 2026-08-28 | In Bluetooth Mesh SDK 6.1.4 and earlier, malformed extended advertisements can trigger out-of-bounds writes leading to stack corruption and remote code executi… |
CVE-2026-71402 | Medium | 5.4 | 2026-08-27 | An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. ni_capture_inspect_udp_header() in src/capture.c reports the IP total length as th… |
CVE-2026-81575 | High | 7.5 | 2026-08-27 | If configured as a server, CodeMeter Runtime before versions 8.41a and 9.10 accepts requests with opcode 0x5e, which contain the data length and
the data itsel… |
CVE-2026-58097 | High | 7.8 | 2026-08-26 | mp_SetEnddisc() copied a user-supplied PSN endpoint value without length validation, allowing a buffer overflow via the ppp(8) command interface.
A local user… |
CVE-2026-58096 | High | 8.8 | 2026-08-26 | LcpDecodeConfig() did not validate the length of received endpoint discriminator options against the minimum required by RFC 1717. Undersized options would tr… |
CVE-2026-14587 | High | 7.5 | 2026-08-05 | Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. When an unauthenticated client sends… |
CVE-2026-67292 | Medium | 6.5 | 2026-08-01 | FreeRDP before 3.29.0 contains a buffer over-disclosure vulnerability in the gateway WebSocket transport (libfreerdp/core/gateway/websocket.c). The client's Po… |
CVE-2026-62424 | Medium | 5.5 | 2026-07-28 | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge… |
CVE-2026-62423 | Medium | 5.5 | 2026-07-28 | [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge… |
CVE-2026-26081 | Medium | 4.8 | 2026-07-20 | HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN format. HAProxy Enterprise and ALOHA are also affected. |
CVE-2026-54466 | High | 7.5 | 2026-07-17 | websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a le… |
CVE-2026-48487 | Medium | 5.3 | 2026-07-17 | Zeroconf is a pure Python implementation of multicast DNS service discovery. Prior to 0.149.16, _read_character_string and _read_string in src/zeroconf/_protoc… |
CVE-2026-60060 | Medium | 6.3 | 2026-07-17 | Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term a… |
CVE-2026-47692 | Medium | 4.8 | 2026-06-26 | Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.34.0 until 1.35.13, 1.36.9, 1.37.5, and 1.38.3, PROXY Protocol v2… |
CVE-2026-6432 | | | 2026-06-25 | Improper bounds validation in the ZAP command parser of EmberZNet SDK versions 8.0.0 through 9.1.1 (inclusive) and before 7.5.2 (exclusive) may result in crash… |
CVE-2026-45681 | Medium | 5.9 | 2026-06-02 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buffer fallba… |
CVE-2026-45615 | High | 8.2 | 2026-05-29 | mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated by asn1c (… |
CVE-2026-48685 | Medium | 6.5 | 2026-05-26 | FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set… |
CVE-2026-9054 | | | 2026-05-22 | An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic. |
CVE-2026-42216 | Critical | 9.1 | 2026-05-07 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions… |
CVE-2026-43125 | Critical | 9.8 | 2026-05-06 | In the Linux kernel, the following vulnerability has been resolved:
dlm: validate length in dlm_search_rsb_tree
The len parameter in dlm_dump_rsb_name() is n… |
CVE-2026-5766 | Medium | 5.3 | 2026-05-05 | An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
ASGI requests with a missing or understated `Content-Length` header can bypass the `FILE_UPL… |
CVE-2026-33846 | High | 7.5 | 2026-05-04 | A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incom… |
CVE-2026-35547 | High | 8.1 | 2026-04-30 | When processing the header of an incoming message, libnv failed to properly validate the message size.
The lack of validation allows a malicious program to wr… |
CVE-2026-3868 | | | 2026-04-27 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length… |
CVE-2026-41898 | Medium | 5.3 | 2026-04-24 | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines behind SslContextBuilder::set_psk… |
CVE-2026-31635 | High | 7.5 | 2026-04-24 | In the Linux kernel, the following vulnerability has been resolved:
rxrpc: fix oversized RESPONSE authenticator length check
rxgk_verify_response() decodes a… |
CVE-2026-5367 | High | 8.6 | 2026-04-24 | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynamic Host Configuration Protocol for IPv6) SOLICIT packets wit… |
CVE-2026-5265 | Medium | 6.5 | 2026-04-24 | When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using… |
CVE-2026-41035 | High | 7.4 | 2026-04-16 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run… |
CVE-2026-33555 | Medium | 4.0 | 2026-04-13 | An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length w… |
CVE-2026-40199 | Medium | 6.5 | 2026-04-10 | Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass.
_pack_ipv6() includes the sentinel byte fr… |
CVE-2026-34831 | Medium | 4.8 | 2026-04-02 | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Files#fail sets the Content-Length response header using String… |
CVE-2026-33936 | Medium | 5.3 | 2026-03-27 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorith… |
CVE-2026-4371 | High | 7.4 | 2026-03-24 | A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connectio… |
CVE-2026-25572 | Medium | 5.1 | 2026-03-10 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK server component does not enforce maximum length checks on… |
CVE-2026-25571 | Medium | 5.1 | 2026-03-10 | A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The SICAM SIAPP SDK client component does not enforce maximum length checks on… |
CVE-2025-48022 | Medium | 6.5 | 2026-02-13 | A vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric Corporation.
If affected product receives maliciously crafted packets… |
CVE-2026-22861 | High | 8.8 | 2026-01-13 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2026-22255 | High | 8.8 | 2026-01-08 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2026-22047 | High | 8.8 | 2026-01-07 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2026-22046 | High | 8.8 | 2026-01-07 | iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color manage… |
CVE-2025-14847 | High | 7.5 | 2025-12-19 | Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all… |
CVE-2025-8531 | Medium | 6.8 | 2025-09-19 | Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU… |
CVE-2025-10458 | High | 7.6 | 2025-09-19 | Parameters are not validated or sanitized, and are later used in various internal operations. |
CVE-2025-26432 | Medium | 5.5 | 2025-09-04 | In multiple locations, there is a possible way to persistently DoS the device due to a missing length check. This could lead to local denial of service with no… |
CVE-2025-5514 | Medium | 5.3 | 2025-08-25 | Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allow… |
CVE-2025-54646 | Medium | 5.1 | 2025-08-06 | Vulnerability of inadequate packet length check in the BLE module.
Impact: Successful exploitation of this vulnerability may affect performance. |
CVE-2023-53157 | Medium | 5.3 | 2025-07-28 | The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UDP packet. |
CVE-2025-52949 | Medium | 6.5 | 2025-07-11 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2025-53604 | Medium | 4.0 | 2025-07-05 | The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length heade… |
CVE-2025-23247 | Medium | 4.4 | 2025-05-27 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to c… |
CVE-2025-29784 | High | 7.5 | 2025-04-18 | NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum sear… |
CVE-2025-29931 | Low | 3.7 | 2025-04-17 | A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2). The affected product does not properly validate a length field in a… |
CVE-2025-30659 | High | 7.5 | 2025-04-09 | An Improper Handling of Length Parameter Inconsistency vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an… |
CVE-2025-32366 | Medium | 4.8 | 2025-04-05 | In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=ntohs(rr->rdlen) and memcpy(response+off… |
CVE-2024-53856 | High | 7.5 | 2024-12-05 | rPGP is a pure Rust implementation of OpenPGP. Prior to 0.14.1, rPGP allows an attacker to trigger rpgp crashes by providing crafted data. This vulnerability i… |
CVE-2024-47293 | Medium | 4.7 | 2024-09-27 | Out-of-bounds write vulnerability in the HAL-WIFI module
Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2024-41991 | High | 7.5 | 2024-08-07 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are… |
CVE-2024-41990 | High | 7.5 | 2024-08-07 | An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-… |
CVE-2024-42460 | Medium | 5.3 | 2024-08-02 | In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whether the leading bit of r and s is zero. |
CVE-2024-20416 | Medium | 6.5 | 2024-07-17 | A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary c… |
CVE-2024-39614 | High | 7.5 | 2024-07-10 | An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack… |
CVE-2024-38875 | High | 7.5 | 2024-07-10 | An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certa… |
CVE-2024-38011 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-38010 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37989 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37988 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-37305 | High | 8.2 | 2024-06-17 | oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and S/MIME using post-quantum… |
CVE-2023-52547 | High | 7.8 | 2024-05-28 | Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26. Memory Corruption in SMI Handler of HddPassword SMM Module. This can be leveraged by a malicious OS attacker… |
CVE-2024-35313 | High | 7.3 | 2024-05-17 | In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 (with full vanguards), aka TROVE-2024-004. |
CVE-2023-5393 | High | 7.4 | 2024-04-11 | Server receiving a malformed message that causes a disconnect to a hostname may causing a stack overflow resulting in possible remote code execution. Honeywell… |
CVE-2024-29064 | Medium | 6.2 | 2024-04-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20685 | Medium | 5.9 | 2024-04-09 | Azure Private 5G Core Denial of Service Vulnerability |
CVE-2024-24976 | Medium | 4.9 | 2024-04-03 | A denial of service vulnerability exists in the OAS Engine File Data Source Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A… |
CVE-2023-50248 | Medium | 4.5 | 2023-12-13 | CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and prior to versions 2.9.10 and 2.10.3, when… |
CVE-2023-40167 | Medium | 5.3 | 2023-09-15 | Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the con… |
CVE-2023-33192 | High | 7.5 | 2023-05-27 | ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can cr… |
CVE-2022-36788 | High | 8.1 | 2023-04-20 | A heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-craf… |