359 matches found
GO-2023-1765 vulnerabilities
Vulnerabilities for packages: pulumi-language-java, aactl...
GO-2026-4976 vulnerabilities
Vulnerabilities for packages: grafana-alloy-fips, zitadel, trino, external-secrets-operator-fips, cluster-autoscaler, etcd-fips, ansible-operator-fips, aactl, fleet-server-fips, nerdctl, kubo-fips, vcluster-fips, knative-kafka-broker-fips, kots, teleport-operator-fips, kube-conformance,...
GO-2023-1574 vulnerabilities
Vulnerabilities for packages: ctop...
CVE-2026-12363: Out-of-bounds Write
The LoRaWAN Fragmented Data Block Transport service subsys/lorawan/services/fragtransport.c does not validate the fragment counter in a received DATAFRAGMENT command before forwarding it to the configured decoder. In fragtransportpackagecallback the value fragcounter = hdr-fragindexn & 0x3FFF is...
PT-2026-72075
Name of the Vulnerable Software and Affected Versions LoRaWAN Fragmented Data Block Transport affected versions not specified Description The LoRaWAN Fragmented Data Block Transport service fails to validate the fragment counter in a received DATA FRAGMENT command before forwarding it to the...
CVE-2026-70457
rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parsesizearg where the return value of snprintf is used directly as an index into a .bss-segment array without bounds checking. When snprintf truncates the formatted size string, the return value equals the number of characters that woul...
GHSA-CRF3-V9RR-V7HJ vulnerabilities
Vulnerabilities for packages: seata...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17029, CVE-2026-18511, CVE-2026-18068, CVE-2026-18086 in Java Secure Sockets Extension JSSE as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17029 DESCRIPTION: IBM i could allow a local attacke...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol
Summary IBM i is vulnerable to multiple vulnerabilites CVE-2026-18077, CVE-2026-16815, CVE-2026-16692 in Simple Mail Transfer Protocol SMTP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18077 DESCRIPTION: IBM i could allow a remote attacker to cause a...
Security Bulletin: IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime
Summary IBM i is vunlerable to multiple vulnerabilities CVE-2026-18193, CVE-2026-18249, CVE-2026-17476 in IBM SDK Java Technology Edition and IBM Runtime Environment Java to support the building and running of Java applications as described in the vulnerability details section. Vulnerability...
Exploit for Out-of-bounds Write in Php
CVE-2026-17544 — PHP bcmath bccomp Out-of-Bounds Write St...
Security Bulletin: Vulnerability in libsolv affects IBM Netezza Appliance
Summary The libsolv package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-48864 Vulnerability Details CVEID:CVE-2026-48864 DESCRIPTION: A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlle...
Security Bulletin: Vulnerability in Glibc affects IBM Netezza Appliance
Summary The Glibc package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5435 Vulnerability Details CVEID:CVE-2026-5435 DESCRIPTION: The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to...
CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)
The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...
CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)
The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...
CVE-2026-12235 Out-of-bounds write in Xtensa llext PLT relocation from malformed ELF (CWE-787)
The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...
CVE-2026-12235
The CVE describes an out-of-bounds write in the Xtensa llext PLT relocation path. Specifically, during relocation in llext_link_plt(), the patch address is computed using rela.r_offset without validating it, allowing a crafted RELA entry with a large r_offset to write outside the extension’s text...
CVE-2025-15685
A flaw has been found in Open5GS up to 2.7.1. Affected by this vulnerability is an unknown functionality of the component freeDiameter. This manipulation causes memory corruption. The attack is possible to be carried out remotely...