3559 matches found
CVE-2026-13506
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67031
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
SUSE CVE-2026-46377
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the escape sequence handler in Tokenizer.parseCurRune in selector/lexer/tokenize.go increments past a trailing backslash in a quoted string such as "\ or '\ and then reads...
CGA-8MF6-WJX6-FGJX
Bulletin has no description...
CVE-2026-64425
A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows linked work items to continue executing even after a system exit process has begun. This can lead to a denial of service by prolonging the exit sequence and potentially consuming system resources unexpectedly...
FreeBSD -- Heap out-of-bounds access in semctl(2)
Problem Description: The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced ...
Rockwell Automation CompactLogix Improper Validation of Integrity Check Value (CVE-2025-11694)
A security issue exists within the affected CompactLogix 5370 controllers due to missing validation of sequence numbers and source IP addresses in the CIP protocol. An attacker can abuse the exposed Connection IDs visible on the controller's web interface to send forged CIP packets, resulting in ...
Elasticsearch 8.x < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-56 / ESA-2026-57)
The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.18, or 9.0.x prior to 9.3.7, 9.4.x prior to or 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-56 and ESA-2026-57 advisories. - Uncontrolled Resource Consumption CWE-400 in...
CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...
SUSE CVE-2026-64473
In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...
SUSE CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64437
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...
UBUNTU-CVE-2026-64462
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...
UBUNTU-CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479
CVE-2026-64479 concerns the Linux kernel ALSA sequencer, where snd_seq_event_dup() can leak 4 bytes of uninitialized kernel heap memory. The issue arises in the UMP-enabled path: when copying an incoming event into a pool cell, the code conditionally zeros cell->ump.raw.extra only if size even...
CVE-2026-64432
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in logreplay copylcns In the analysis pass of $LogFile journal replay, logreplay copies LCNs from each action log record into an existing Dirty Page Table DPT entry without bounding th...
PT-2026-64694
In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfs create devm seqfile store a devres allocated debugfs devm entry as inode private data. vfio unregister group dev currently calls...