45110 matches found
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
Security Bulletin: Due to use of log4j-core, IBM webMethods BPM is vulnerable to Improper Encoding or Escaping of Output
Summary IBM webMethods BPM is dependant on log4j-core which is affected by known vulnerability - CVE-2026-34479 Vulnerability Details CVEID:CVE-2026-34479 DESCRIPTION: The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard,...
EUVD-2026-74632
Out-of-bounds write in libcodec2secevrcdec.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
EUVD-2026-74627
Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration...
CLEANSTART-2026-ZI25974 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
CLEANSTART-2026-BA42566 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
Debian dla-4778 : python-pyasn1-doc - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4778 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4778-1 [email protected]...
CVE-2026-21085: Out-of-bounds Write
Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory...
TencentOS Server 3: python-pyasn1 (TSSA-2026:0990)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0990 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2026-21089: Improper Input Validation
Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory...
PT-2026-88980
Name of the Vulnerable Software and Affected Versions Check Point Quantum Security Management affected versions not specified Check Point Quantum Security Gateway affected versions not specified Check Point Spark Firewall affected versions not specified Description A heap-based buffer overflow...
CVE-2026-87807: Improper Neutralization of Special Elements used in an SQL Command
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and...
CVE-2026-85103: Heap-based Buffer Overflow
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems...
SUSE CVE-2026-82728
Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP server to exhaust memory on the client host and cause a denial of service. Two HTTP/1 response-parser states accumulate server data without any cap. In lib/mint/http1.ex, decodestatusline/4...
CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1
CVE-2026-18313 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...