56636 matches found
freerdp security update
An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...
UBUNTU-CVE-2026-56853
When a server is configured to support unencrypted HTTP/2, it reads a...
CVE-2026-18671
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...
CVE-2026-17216
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-73489 vulnerabilities
Vulnerabilities for packages: yazi...
EUVD-2026-58473
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...
CVE-2026-18671 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary denial of service...
CVE-2026-18671
CVE-2026-18671 affects IBM i releases 7.3–7.6. An authenticated attacker can trigger a NetServer thread exception due to an integer overflow during bounds checking in request processing, causing a temporary denial of service. Affected products: IBM i 7.3, 7.4, 7.5, 7.6. The IBM Security Bulletin ...
CVE-2026-17216 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
EUVD-2026-58402
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers...
CVE-2026-17216
CVE-2026-17216 affects IBM i 7.6, 7.5, 7.4, and 7.3. A remote attacker could cause a denial of service due to an integer error when processing DRDA large-object headers. The CVSS v3.1 base score is 5.3 (Medium) with network attack vector, no user interaction required, and availability impact desc...
freerdp security update
An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...
SUSE-SU-2026:3614-1 Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. - CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator bsc1274275. - CVE-2026-16439: using -Xtrace to trace method arguments can lead to...
CVE-2026-33328
A flaw was found in libvips, an image processing library. On 32-bit systems, a vulnerability in the gifload operation could lead to an integer overflow due to incorrectly determined image dimensions. This could allow a local attacker to cause the application to crash, resulting in a denial of...
CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow
frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...
CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow
frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...
CVE-2026-73564
The CVE affects frp (frps) with the SSH Tunnel Gateway enabled. A root cause was an integer overflow in parsing an SSH exec channel: the code adds 4 to an attacker-controlled 4-byte length, and 0xFFFFFFFF wraps to 3, causing a bounds check bypass and a panic in TunnelServer.handleNewChannel. When...
CVE-2026-33327
A flaw was found in libvips, an image processing library. The vipsload operation, responsible for loading images, could incorrectly calculate image dimensions. This error leads to an integer overflow, which subsequently causes a heap-based buffer overflow. A local attacker with low privileges cou...
Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.9 or higher and 6.0.1.1 or higher
Summary The following vulnerabilities, which can affect IBM Storage Scale and the HDFS layer and could provide weaker-than-expected security, are now addressed in Storage Scale 5.2.3.9 or higher and 6.0.1.1 or higher. CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585,...
