45063 matches found
CVE-2023-54403: Improper Limitation of a Pathname to a Restricted Directory
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbitrary files via an unvalidated filePath parameter. Attackers can exploit this...
PT-2026-103593
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbitrary files via an unvalidated filePath parameter. Attackers can exploit this...
CVE-2026-103399: Inconsistent Interpretation of HTTP Requests
A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...
VulnCheck KEV: CVE-2023-54403
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbitrary files via an unvalidated filePath parameter. Attackers can exploit this...
PT-2026-103492
Name of the Vulnerable Software and Affected Versions SoupServer libsoup affected versions not specified Description An issue exists where SoupServer fails to drain declared body bytes or close the connection when an HTTP/1.x client sends a request containing a request body and the Expect:...
AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc (ALMALINUX9.2:CLSA-2026:1778756991)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778756991 advisory. - A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in...
AlmaLinux 9.6 [TuxCare] Security Update: wireshark / wireshark-cli / wireshark-devel Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785518972)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785518972 advisory. - AFP Spotlight protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-5401 -...
AlmaLinux 9.2 [TuxCare] Security Update: opencryptoki / opencryptoki-devel / opencryptoki-icsftok / etc (ALMALINUX9.2:CLSA-2026:1784542737)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784542737 advisory. - A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS1 v1.5 padded ciphertexts. Thi...
TencentOS Server 4: libreswan (TSSA-2026:1060)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1060 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CentOS Linux 7 [TuxCare] Security Update: squashfs-tools (CENTOS7:CLSA-2026:1777544697)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1777544697 advisory. - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the...
SUSE CVE-2026-95393
CSN.1 protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-102758
The NetX Secure library contains a vulnerability in the _nx_secure_x509_asn1_tlv_block_parse() function, which handles ASN.1 TLV blocks during X.509 certificate parsing. The root cause is an out-of-bounds read because the function reads a one-byte ASN.1 tag from the buffer before verifying that t...
CVE-2026-102758
The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...
MAL-2026-17264 Malicious code in @hrmony/kit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4084c44ab6554d66c474338de2cb482a25b31e6822d470e08b2b2ef5b1735a The package executes credential-harvesting code both from its postinstall script scripts/check-setup.mjs and from its main entry index.js, so theft...
Malicious code in @hrmony/kit-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4084c44ab6554d66c474338de2cb482a25b31e6822d470e08b2b2ef5b1735a The package executes credential-harvesting code both from its postinstall script scripts/check-setup.mjs and from its main entry index.js, so theft...
CVE-2026-95509
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...
CVE-2026-95393
A flaw was found in Wireshark's CSN.1 Concrete Syntax Notation One protocol dissector. By transmitting malformed network packets or providing a crafted packet capture file, an attacker can trigger a heap-based buffer overflow. This vulnerability causes the application to crash, leading to a Denia...
CVE-2026-95509 Out-of-bounds read vulnerability in string formatting impacts Qt for MCUs
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...
EUVD-2026-88732
Strings optimized for Latin-1 displaying Latin-1 characters cause incorrect String.arg formatting by an incorrect buffer size calculation, causing out-of-bounds reading...
CVE-2026-95509
The Qt for MCUs framework is vulnerable to an out-of-bounds read due to an incorrect buffer size calculation during String.arg() formatting. This issue specifically affects strings optimized for Latin-1 characters when displaying Latin-1 characters. The vulnerability can result in an out-of-bound...