254235 matches found
kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning
A flaw was found in the Linux kernel's ixgbevf network driver. This vulnerability, a use-after-free, occurs when the driver attempts to process network packets for a specific multicast workaround. An attacker could potentially exploit this by sending specially crafted network traffic, which may...
Exploit for Code Injection in Exiftool_Project Exiftool
exiftool 7.44-12.23 Exploit This script exploits CVE-2021-22...
Security Bulletin: IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI [CVE-2026-96119]
Summary IBM i is vulnerable to allowing a remote authenticated attacker to execute arbitrary code due to improper data sanitization CVE-2026-96119 in HTTP Server Administration Graphical User Interface GUI as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-96119...
OESA-2026-4407 emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...
OESA-2026-4404 emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...
OESA-2026-4405 emacs security update
Emacs is the extensible, customizable, self-documenting real-time display editor. At its core is an interpreter for Emacs Lisp, a dialect of the Lisp programming language with extensions to support text editing. And it is an entire ecosystem of functionality beyond text editing, including a proje...
OESA-2026-4264 librsvg2 security update
An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...
OESA-2026-4265 librsvg2 security update
An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...
OESA-2026-4263 librsvg2 security update
An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...
OESA-2026-4262 librsvg2 security update
An SVG library based on cairo. Security Fixes: A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entit...
CVE-2026-100721
A flaw was found in vm2. An attacker running untrusted guest code inside the sandbox can escape isolation and achieve arbitrary code execution on the underlying host system. When an application configures a custom external module resolver, vm2 fails to enforce strict file path boundaries when...
[SECURITY] [DLA 4838-1] chromium security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4838-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort October 16, 2026 https://wiki.debian.org/LTS -...
BIT-VAULT-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...
CVE-2026-111381
A flaw was found in FreeRDP. This flaw allows arbitrary code execution or a Denial of Service DoS when parsing persistent cache files. A local attacker can trigger this vulnerability by tricking a user into loading a maliciously crafted cache file containing oversized image dimensions. This...
CVE-2026-111379
A flaw was found in FreeRDP. This vulnerability allows a local attacker to execute arbitrary code or cause a denial of service DoS by supplying a specially crafted persistent cache file. When processing the malformed cache file, an arithmetic calculation error causes an undersized memory buffer t...
Vulnerabilities in Adobe ColdFusion
Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include Server-Side Request Forgery SSRF, incorrect authorization, improper input validation, code injection, XML External Entity XXE attacks, uncontrolled resource consumption, and path traversal. Attackers c...
Vulnerabilities in HPE Brocade Fabric OS
HPE has identified several security vulnerabilities in Brocade Fabric OS, particularly in versions prior to 10.0.1, as well as in the 9.2.x and 10.0.x release lines. These vulnerabilities include authentication bypasses, denial-of-service attacks, information leakage, privilege escalation, buffer...
CVE-2026-111458
The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...
DEBIAN-CVE-2026-111458
The fanxfingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlenb64 + strlenhex + 31, but the format string "fan1:x509:server:passive:%s:sha256:%s" contains 33 fixed characters in...
[SECURITY] [DSA 6566-1] expat security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6566-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 16, 2026 https://www.debian.org/security/faq -...