agentprime: CWE-170

CVE-2026-121943: Irontec sngrep through 1.9.0 Out-of-Bounds Stack Read via sip_check_packet

Wed, 04 Nov 2026 12:31:21 GMT

CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-57185: Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser

Tue, 27 Oct 2026 16:40:27 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-114457: Mod_qos: missing nul termination in json value escaping permits out-of-bounds reads

Thu, 22 Oct 2026 06:37:03 GMT

CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96850: Windows Modern Device Management (MDM) Information Disclosure Vulnerability

Tue, 13 Oct 2026 19:01:18 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83781: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:55 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-96860: Windows USB Print Driver Information Disclosure Vulnerability

Tue, 13 Oct 2026 19:00:34 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81882: radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

Tue, 22 Sep 2026 15:12:49 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-73324: VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

Wed, 09 Sep 2026 13:31:59 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-78506: Microsoft Office Word Information Disclosure Vulnerability

Tue, 08 Sep 2026 17:18:32 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-70587: Windows Remote Desktop Protocol Information Disclosure Vulnerability

Tue, 08 Sep 2026 17:12:24 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-45798: Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field

Wed, 19 Aug 2026 16:20:54 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72095: dma-fence: Make dma_fence_dedup_array() robust against 0-count input

Sat, 15 Aug 2026 05:52:41 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-63860: RDMA/core: Prefer NLA_NUL_STRING

Sun, 19 Jul 2026 14:04:48 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-44452: h2o is vulnerable to heap overrun

Thu, 16 Jul 2026 22:54:42 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12386: Buffer Overflow in TUBITAK BILGEM's Pardus Pen

Sun, 05 Jul 2026 14:31:47 GMT

CVSS 3.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55738: Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field

Wed, 17 Jun 2026 13:45:00 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5067: Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key

Tue, 09 Jun 2026 06:01:02 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-8721: Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs

Sun, 17 May 2026 18:51:41 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-42010: Gnutls: gnutls: authentication bypass via nul character in username

Thu, 07 May 2026 12:00:05 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34464: Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field

Tue, 05 May 2026 19:31:54 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34462: Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy

Tue, 05 May 2026 19:30:37 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-34032: Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)

Mon, 04 May 2026 12:54:54 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated

Fri, 01 May 2026 14:15:29 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-40334: libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c

Fri, 17 Apr 2026 23:16:38 GMT

CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-33948: jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

Mon, 13 Apr 2026 23:51:04 GMT

CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-2239: Gimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow

Thu, 26 Mar 2026 20:00:28 GMT

CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-32837: mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing

Tue, 17 Mar 2026 19:10:06 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-23749: Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read

Thu, 26 Feb 2026 17:32:30 GMT

CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-27692: iccDEV has HBO in CIccTagTextDescription::Release()

Wed, 25 Feb 2026 14:40:22 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-67733: Valkey Affected by RESP Protocol Injection via Lua error_reply

Mon, 23 Feb 2026 19:39:29 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24852: iccDEV has a heap-buffer-overflow in icXmlParseTextString()

Wed, 28 Jan 2026 00:27:11 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21488: iccDEV has Out-of-bounds Read, Heap-based Buffer Overflow and Improper Null Termination

Tue, 06 Jan 2026 13:52:21 GMT

CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-2026: Improper null termination in Moxa NPort 6100-G2/6200-G2 Series

Wed, 31 Dec 2025 07:32:26 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-67790: An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.

Wed, 17 Dec 2025 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

Envoy's TLS certificate matcher for `match_typed_subject_alt_names` may incorrectly treat certificates containing an embedded null byte

Fri, 05 Dec 2025 18:14:02 GMT

github.com/envoyproxy/envoy <1.33.13 || >=1.34.0, <1.34.11 || >=1.35.0, <1.35.7 || >=1.36.0, <1.36.3, fixed in 1.33.13, 1.34.11, 1.35.7, 1.36.3. CVSS 5.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-62792: Wazuh vulnerable to Heap-based Buffer Over-read in w_expression_match

Wed, 29 Oct 2025 16:50:05 GMT

CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

Fri, 10 Oct 2025 22:53:25 GMT

python-ldap <3.4.5, fixed in 3.4.5. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-31197: Improper Null Termination in libfluid_msg library

Wed, 18 Sep 2024 13:59:12 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-43474: Microsoft SQL Server Information Disclosure Vulnerability

Tue, 10 Sep 2024 16:53:51 GMT

CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-45288: Multiple vulnerabilities in libnv

Thu, 05 Sep 2024 03:18:26 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-31484: Improper null termination in Siemens CPC80 Central Processing/Communication and others

Tue, 14 May 2024 10:02:23 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-21442: Windows USB Print Driver Elevation of Privilege Vulnerability

Tue, 12 Mar 2024 16:57:47 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-48674: Improper null termination in Dell CPG BIOS

Fri, 01 Mar 2024 12:35:56 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-36907: Windows Cryptographic Services Information Disclosure Vulnerability

Tue, 08 Aug 2023 17:08:26 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-36906: Windows Cryptographic Services Information Disclosure Vulnerability

Tue, 08 Aug 2023 17:08:26 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-35321: Windows Deployment Services Denial of Service Vulnerability

Tue, 11 Jul 2023 17:02:39 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-28263: Visual Studio Information Disclosure Vulnerability

Tue, 11 Apr 2023 19:13:57 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-24021: Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over-reads on the Web Application Firewall when executing rules…

Fri, 20 Jan 2023 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-47515: An issue was discovered in drachtio-server before 0.8.20.

Sun, 18 Dec 2022 00:00:00 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2021-31888: Improper null termination in Siemens APOGEE MBC (PPC) (BACnet) and others

Tue, 09 Nov 2021 11:32:00 GMT

Published by the CVE Program. Not analysed by agentprime yet.