agentprime: CWE-130

MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets

Fri, 30 Oct 2026 23:00:12 GMT

org.mariadb.jdbc:mariadb-java-client >=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11, fixed in 3.3.7, 3.4.5, 3.5.11. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths

Fri, 30 Oct 2026 23:00:07 GMT

org.mariadb.jdbc:mariadb-java-client >=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.10, fixed in 3.3.7, 3.4.5, 3.5.10. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-119600: tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length

Fri, 30 Oct 2026 13:18:19 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-119277: MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths

Thu, 29 Oct 2026 20:49:24 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-115794: Alarm data length not validated against received frame length

Thu, 29 Oct 2026 15:43:55 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116531: HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunk

Wed, 28 Oct 2026 17:16:42 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114597: Improper handling of length parameter inconsistency in EPICS Base

Tue, 27 Oct 2026 16:51:59 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116013: OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing

Sat, 24 Oct 2026 11:40:31 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114646: NoSQL command injection via mismatched raw BSON length prefix written verbatim to the wire

Thu, 22 Oct 2026 19:13:50 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-105960: HMS Networks PEAK-System PCAN Windows drivers Improper Handling of Length Parameter Inconsistency

Tue, 20 Oct 2026 20:28:12 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87864: IMAP APPEND plus CRLF conversion command injection

Tue, 20 Oct 2026 20:13:13 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110912: In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and protocol address le…

Thu, 15 Oct 2026 03:23:47 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101962: Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used

Wed, 14 Oct 2026 17:19:36 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92159: F´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry

Wed, 14 Oct 2026 17:12:47 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102054: Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured

Wed, 14 Oct 2026 16:54:26 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101942: Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used

Wed, 14 Oct 2026 16:42:01 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101994: Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash

Wed, 14 Oct 2026 16:30:33 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-101991: Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled

Wed, 14 Oct 2026 16:21:15 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90921: Maximo AI Service Denial of Service

Mon, 12 Oct 2026 21:42:46 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-109390: AnyDesk: AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code…

Mon, 12 Oct 2026 14:40:10 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83745: Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)

Fri, 02 Oct 2026 12:16:15 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-85494: Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a pe…

Fri, 02 Oct 2026 10:42:44 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94633: Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length

Fri, 02 Oct 2026 10:13:00 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-94635: Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name

Fri, 02 Oct 2026 09:07:56 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-18397: SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

Thu, 01 Oct 2026 21:49:42 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102718: Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length

Tue, 29 Sep 2026 17:44:43 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with per-message-deflate

Wed, 23 Sep 2026 11:32:55 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-77619: Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.

Tue, 22 Sep 2026 15:15:45 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-5778: Missing Length Check

Fri, 18 Sep 2026 13:19:47 GMT

CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73455: Security Advisory 0173

Wed, 16 Sep 2026 09:46:15 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-90678: An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5.

Sun, 13 Sep 2026 03:37:55 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15418: CP210x Memory Leakage

Thu, 10 Sep 2026 17:15:04 GMT

CVSS 2.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71337: Windows Storage Management Provider Elevation of Privilege Vulnerability

Tue, 08 Sep 2026 17:12:26 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5706: Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements

Thu, 27 Aug 2026 22:13:56 GMT

CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71402: wicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length

Thu, 27 Aug 2026 15:09:41 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81575: Missing Sanity Checks for Buffer Lengths

Thu, 27 Aug 2026 07:13:19 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58097: ppp(8): missing length validation in mp_SetEnddisc()

Wed, 26 Aug 2026 05:28:17 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-58096: ppp(8): missing length validation in LcpDecodeConfig()

Wed, 26 Aug 2026 05:28:09 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-14587: Unathenticated connection can hold Bolt channel open

Wed, 05 Aug 2026 16:10:47 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-67292: FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure

Sat, 01 Aug 2026 12:22:18 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62424: buffer overruns in libfsimage iso9660 handling

Tue, 28 Jul 2026 12:31:41 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62423: buffer overruns in libfsimage iso9660 handling

Tue, 28 Jul 2026 12:31:41 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-26081: HAProxy: HAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the…

Mon, 20 Jul 2026 00:00:00 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-60060: TeraTerm Project TTSSH2: Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in…

Fri, 17 Jul 2026 04:13:38 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

websocket-driver: Message corruption via abuse of protocol length headers

Wed, 15 Jul 2026 22:07:24 GMT

websocket-driver <0.7.5, fixed in 0.7.5. CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-47692: Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream

Fri, 26 Jun 2026 17:59:38 GMT

CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6432: Improper bounds validation in EmberZNet SDK

Thu, 25 Jun 2026 13:49:37 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

Mon, 22 Jun 2026 23:07:44 GMT

zeroconf <0.149.16, fixed in 0.149.16. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-45615: mouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER Payload

Fri, 29 May 2026 13:24:51 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-48685: FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set.

Tue, 26 May 2026 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.