AlmaLinux 9.2 [TuxCare] Security Update: tigervnc / tigervnc-icons / tigervnc-license / tigervnc-selinux / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777885651)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777885651 advisory. - A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling,...

AlmaLinux 9.2 [TuxCare] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-devel (ALMALINUX9.2:CLSA-2026:1790073567)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1790073567 advisory. - A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the...

CVE-2026-76835

A flaw was found in oauth2-proxy. When configured in reverse-proxy mode without explicit trusted proxy settings, the application defaults to treating all incoming network traffic as originating from trusted proxies. A remote, unauthenticated attacker can exploit this issue by sending a request wi...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2025-2995

CVE-2025-29927 認証バイパスの再現 このリポジトリは、next パッケージにおける CVE-2025-29927 脆弱性の再現です。 再現手順 1. 以下の手順に従って、Next.js アプリケーションをクローンして実行します。 2. 認証が /api/hello エンドポイントへのアクセスを拒否することをテストします。 $ curl http://localhost:3000/api/hello "error":"Unauthorized"% 3. トークンが提供された場合に認証が機能することをテストします。 $ curl -H "Authorization:...

CVE-2017-1000486

CVE-2017-1000486 PrimeFaces 5.x ELインジェクション（CVE-2017-1000486）の概念実証エクスプロイトです。このRCE脆弱性を利用して、ターゲット上でリモートコード実行が可能です。 脆弱性の説明 脆弱性の詳細な説明は、Minded Securityブログをご覧ください。 使用方法 このエクスプロイトには、重要なパラメータを表示するヘルプ機能があります。 ./primefaces.py --help PrimeFaces 5.x EL injection exploit CVE-2017-1000486 by MOGWAI LABS...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-102758

The NetX Secure library contains a vulnerability in the _nx_secure_x509_asn1_tlv_block_parse() function, which handles ASN.1 TLV blocks during X.509 certificate parsing. The root cause is an out-of-bounds read because the function reads a one-byte ASN.1 tag from the buffer before verifying that t...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

EUVD-2026-89113

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-84783

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server...

DEBIAN-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105474 CVE-2026-35189 affecting package edk2 20240524git3e722403cd16-20

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105903 CVE-2026-35189 affecting package shim-unsigned-x64 16.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105627 CVE-2026-35189 affecting package openvmm 0.1.0-1

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105870 CVE-2026-35189 affecting package rust 1.96.1-2

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

AZL-105564 CVE-2026-35189 affecting package openssl 3.3.7-6

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...

ALPINE-CVE-2026-35189

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...