CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-48440 ColdFusion | Heap-based Buffer Overflow (CWE-122)

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

CVE-2026-48440

CVE-2026-48440 affects Adobe ColdFusion due to a Heap-based Buffer Overflow . The issue could allow arbitrary code execution in the context of the current user . Exploitation depends on conditions beyond the attacker’s control and does not require user interaction. Current documents do not specif...

Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Jansi

Summary A vulnerability in Jansi that is used by InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2026-8484 DESCRIPTION: A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl" wrapper due to a lack of size verification for the argument array before the...

MINI-4XGC-C5PF-HMFW

Bulletin has no description...

PT-2026-70324

Name of the Vulnerable Software and Affected Versions IntelR Open Volume Kernel Library IntelR Open VKL versions prior to 2.0.2 Description A heap-based buffer overflow exists within Ring 3: User Applications. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

Amazon Linux 2 : oci-add-hooks, --advisory ALAS2DOCKER-2026-122 (ALASDOCKER-2026-122)

The version of oci-add-hooks installed on the remote host is prior to 0-0.10.20200504git325a340. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-122 advisory. When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a...

CVE-2025-61624

creationtimestamp| type| source ---|---|--- 2026-04-14 04:00:00+00:00| exploited| https://fortiguard.fortinet.com/psirt/FG-IR-26-122 2026-06-19 12:45:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc9f5a22-991b-450e-a4f2-b67d62e07e1a 2026-10-16...

CVE-2026-4498: Execution with Unnecessary Privileges

Execution with Unnecessary Privileges CWE-250 in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via Privilege Abuse CAPEC-122. This requires an authenticated Kibana user with Fleet sub-feature privileges such as agents, agent...

PT-2026-21564

Name of the Vulnerable Software and Affected Versions free5GC go-upf versions prior to 1.2.8 Description The go-upf component of free5GC, a User Plane Function UPF implementation for 5G networks, contains a Heap-based Buffer Overflow. A specially crafted PFCP Session Modification Request with an...

Next.js - Critical - Access bypass - SA-CONTRIB-2025-122

This module enables integration between Next.js and Drupal for headless CMS functionality. When installed, the module automatically enables cross-origin resource sharing CORS with insecure default settings Access-Control-Allow-Origin: , overriding any services.yml CORS configuration. This allows...

Fortinet FortiWeb Pre-authentication DoS attack in OpenSSH - CVE-2025-26466 (FG-IR-25-122)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-122 advisory. - A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memor...

Malicious code in riyanto-122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e7d3edbf65a44f158f66ac57ca605601a05c017d8ebc6e0bf846884dd073fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-57740

CVE-2025-57740 describes a heap-based buffer overflow (CWE-122) in FortiOS (multiple branches) and FortiPAM/FortiProxy, where an authenticated user may cause code execution via crafted RDP bookmark requests. Affected: FortiOS 7.6.2 and below, 7.4.7 and below, 7.2.10 and below, 7.0 all versions, 6...

A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox < 122.

...

The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 122.

...

OSV-2025-619 Heap-buffer-overflow in webvtt_domnode_SelectNodesInTree

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437537868 Crash type: Heap-buffer-overflow READ 1 Crash state: webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree webvttdomnodeSelectNodesInTree...

Linux Distros Unpatched Vulnerability : CVE-2024-1553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that...

Linux Distros Unpatched Vulnerability : CVE-2024-0753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2024-0749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A phishing site could have repurposed an about: dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox...