395 matches found
CVE-2026-116568
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...
CVE-2026-116567
Prior to version 1.11.2 , FreeSWITCH is vulnerable to a pre-authentication stack buffer overflow in the mod_rtmp module. The vulnerability exists in the rtmp_handle_control() function, where an unbounded sprintf loop renders an RTMP user-control message into a 200-byte stack buffer. An attacker c...
CVE-2026-116567 FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmphandlecontrol rendered an RTMP user-control message into a 200-byte stack buffer using an...
CVE-2026-116567 FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmphandlecontrol rendered an RTMP user-control message into a 200-byte stack buffer using an...
EUVD-2026-117735
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmprtmp2rtpH264 trusted the length prefix of each inbound H.264 NAL unit without checking it...
PT-2026-137691
Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.2 Description The rtmp handle control function renders an RTMP user-control message into a 200-byte stack buffer using an unbounded sprintf loop controlled by the wire message length. A message body of...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1935)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1935 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of old filters before change CVE-2026-53080 Tenable has extracted the preceding description...
CVE-2025-1935 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2025-1935 vulnerabilities
Vulnerabilities for packages: firefox...
Security Bulletin: Infosphere BigInsights is affected by multiple IBM DB2 advisories (CVE-2014-8910, CVE-2015-1883, CVE-2015-1922, CVE-2015-1935)
Problem Need to understand whether DB2 advisory impacts BigInsights 4.1 installations "Product":"code":"SSCRJT","label":"IBM Db2 Big SQL","Business Unit":"code":"BU048","label":"IBM Software","Component":"--","Platform":"code":"PF016","label":"Linux","Version":"4.1.0","Edition":"","Line of...
CVE-2026-1935 Company Posts for LinkedIn <= 1.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary LinkedIn Post Data Deletion
The Company Posts for LinkedIn plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.0. This is due to a missing capability check on the linkedincompanypostresethandler function hooked to adminpostresetlinkedincompanypost. This makes it possible for...
MiracleLinux 7 : firefox-38.6.0-1.0.1.el7.AXS7 (AXSA:2016-046:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-046:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...
MiracleLinux 4 : kernel-2.6.32-358.11.1.el6 (AXSA:2013-540:05)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-540:05 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
MiracleLinux 4 : firefox-38.6.0-1.0.1.AXS4 (AXSA:2016-050:01)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-050:01 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this releas...
MiracleLinux 4 : thunderbird-38.6.0-1.AXS4 (AXSA:2016-111:02)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-111:02 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security issues fixed with this release: CVE-2016-1930 Multiple unspecified...
MiracleLinux 4 : kernel-2.6.32-358.11.1.el6 (AXSA:2013-571:06)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-571:06 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
MiracleLinux 9 : firefox-128.8.0-1.el9_5.ML.1 (AXSA:2025-9736:09)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9736:09 advisory. firefox: Use-after-free in WebTransportChild CVE-2025-1931 firefox: AudioIPC StreamData could trigger a use-after-free in the Browser process...
EUVD-2022-46619
Malicious code in bioql PyPI...