265744 matches found
Astra Linux – Vulnerability in vtk6, vtk7
There is a NULL pointer dereference vulnerability in VTK before 9.2.5. This vulnerability resides in the file IO/Infovis/vtkXMLTreeReader.cxx. The vendor did not check the return value of the libxml2 API function ‘xmlDocGetRootElement’, and tried to dereference that NULL pointer. This is unsafe, ...
Astra Linux – Vulnerability in bcel
Apache Commons BCEL includes several APIs that typically only allow modifying specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to generate arbitrary bytecode. This could lead to abuse in applications that send attacker-controllable data to tho...
Astra Linux – Vulnerability in curl
libcurl provides the CURLOPTCERTINFO option to allow applications to request details about a server’s certificate chain. Due to a faulty function, a malicious server could cause libcurl, built with NSS, to get stuck in an endless busy-loop when attempting to retrieve that information...
Astra Linux – Vulnerability in Chromium
Before version 91.0.4472.101, using the "After Free" feature in Google Chrome’s accessibility settings allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Git
Git is an open-source, scalable, distributed revision control system. git shell is a restricted login shell that can be used to implement Git’s push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits comman...
Astra Linux – Vulnerability in Chromium
The incorrect security UI in Payments in Google Chrome prior to version 121.0.6167.85 allowed a remote attacker to potentially spoof the security UI through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Apache2
Heap-based Buffer Overflow vulnerability in modproxyajp of Apache HTTP Server. If modproxyajp connects to a malicious AJP server, that malicious AJP server can send a malicious AJP message back to modproxyajp, causing it to write 4 bytes controlled by the attacker after the end of a heap-based...
Astra Linux – Vulnerability in openjdk-11
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. The supported versions affected by this vulnerability are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. This vulnerability is difficult to exploit; an...
Astra Linux – Vulnerability in rpm
A flaw was discovered in RPM’s signature check functionality when reading a package file. This flaw allows an attacker who can persuade a victim to install a seemingly verifiable package, whose signature header was modified, to cause corruption of the RPM database and execute malicious code. The...
ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root
Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
CVE-2026-90682
A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...
CVE-2023-43344
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:05+00:00| seen| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI 2026-09-15 00:00:31+00:00| published-proof-of-concept| Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YOLawI6LgE5lPyRWI...
UBUNTU-CVE-2026-90576
A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...
CVE-2021-47939
creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:41+00:00| seen| https://t.me/shimiscyberworld/1340...
CVE-2026-75162
creationtimestamp| type| source ---|---|--- 2026-09-11 21:50:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117254612752271368 2026-09-11 21:50:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvbkcjpdpc2o...
CVE-2026-79708
creationtimestamp| type| source ---|---|--- 2026-09-11 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvaq2esev62q 2026-09-14 07:45:28+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260914 2026-09-14 07:45:48+00:00| seen|...
CVE-2026-88026
creationtimestamp| type| source ---|---|--- 2026-09-11 12:45:12+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mongodb-4 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...
ROOT-OS-DEBIAN-11-CVE-2026-0864 CVE-2026-0864 in python3.9 - Patched by Root
Root has patched CVE-2026-0864 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...