200698 matches found
CVE-2026-106064
A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer size. The plug-in allocates a buffer based on the wrapped value while GEGL writes using the true image extent, rooted ...
EulerOS 2.0 SP15 : p11-kit (EulerOS-SA-2026-3930)
According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a...
CVE-2026-107181
Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. Attackers can reach the interpret: scheme handler to upload local files, including...
ROS-20261008-73-0314
The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0068
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0336
The vulnerability in the kernel-lt is related to incorrect blocking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0239
The vulnerability of the cdns3gadgetepqueue function in the drivers/usb/cdns3/cdns3-gadget.c file of the Linux device driver module is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261008-73-0334
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0207
The vulnerability of the garppduparseattr function in the net/802/garp.c module, which is part of the networking functions in the Linux kernel, relates to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261008-73-0158
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-56851
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...
Important: mod_auth_openidc security update
The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...
CVE-2026-92543
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDRMatch resolves all of the hostname's addresses and returns true if a single address is in the insecure CIDR list. Becau...
Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
ROS-20261008-73-0005
The vulnerability of the pgstatstatements extension in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0174
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0283
The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261008-73-0182
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...