Mageia: Security Advisory (MGASA-2026-0061)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] expat

New expat packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/expat-2.7.5-i586-1slack15.0.txz: Upgraded. This update fixes security issues: Fix NULL function pointer dereference for empty external...

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition.

...

UBUNTU-CVE-2026-32778

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...

CVE-2026-32778

CVE-2026-32778 affects libexpat prior to 2.7.5, where a NULL pointer dereference can occur in setContext on retry after an out-of-memory condition. The connected IBM AIX advisory and OS advisories confirm the issue and provide a patch path, indicating remediation is to upgrade/export to a version...

CVE-2026-32778

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...

CVE-2026-32778

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...

CVE-2026-32778

libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition...

Linux Distros Unpatched Vulnerability : CVE-2026-32778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition. CVE-2026-32778 Note that...

CVE-2025-32778

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11907 2025-04-15 21:21:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114344073080765410 2025-08-17 23:15:46+00:00| published-proof-of-concept|...

CVE-2025-32778

CVE-2025-32778 affects Web-Check’s /api/screenshot endpoint. A user-controlled url is passed to a shell command via exec(), enabling command injection that could lead to arbitrary commands on the host. The issue is mitigated by replacing exec() with execFile(), which avoids a shell and properly i...

CVE-2024-32778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.4...

CVE-2024-32778

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.4...

CVE-2024-32778

Technical details about CVE-2024-32778 are not provided in the connected documents. Public details such as exploit vectors, exact affected versions beyond 21.3.4, and mitigations are not present here. Monitor for updates.

CVE-2024-32778 WordPress Contest Gallery plugin <= 21.3.4 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery.This issue affects Contest Gallery: from n/a through = 21.3.4...

CVE-2022-32778

creationtimestamp| type| source ---|---|--- 2022-08-22 22:20:43+00:00| seen| https://t.me/cibsecurity/48539 2025-04-15 18:55:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11891...

CVE-2022-32778

WWBN AVideo 11.6 and dev master commit 3f7c0364 are affected by information-disclosure cookies issues (CVE-2022-32777 and CVE-2022-32778) per TALOS-2022-1542. The session cookie lacks HttpOnly and Secure flags, allowing access via JavaScript and leakage over non-HTTPS. The pass cookie also lacks ...

CVE-2022-32778

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32778)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

olcne istio istio kubernetes security update

olcne 1.3.2-2 - Turn off default PodDisruptionBudget in istio template to unblock kubernetes module upgrade - Update Kubernetes version to 1.20.11 to address CVE-2021-25741 - Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781 -...