EUVD-2026-109611

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution...

CVE-2026-113345

The Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Attackers with local access may tamper with files in the application's installation folder, which can lead ...

xorg-x11-server: xorg-x11-server: Out-of-bounds write via unvalidated modifier in ProcXIPassiveUngrabDevice

A flaw was found in xorg-x11-server. A local authenticated client can exploit this flaw by sending a crafted input device ungrab request with an unvalidated modifier value. This lack of validation causes the server to perform an out-of-bounds write on the heap, resulting in memory corruption that...

xorg-x11-server: xorg-x11-server: arbitrary code execution via out-of-bounds write in XKB keycode handling

A flaw was found in xorg-x11-server. In the X Keyboard Extension XKB, key name memory is allocated with an insufficient buffer size compared to the maximum supported range. An authenticated local client can exploit this flaw by sending requests that modify the keycode range, triggering a heap-bas...

xorg-x11-server: xorg-x11-server: arbitrary code execution via GLX RenderLarge heap-based buffer overflow

A flaw was found in xorg-x11-server. The GLX OpenGL Extension to the X Window System interface fails to verify that incoming data sizes do not exceed allocated buffer limits when handling large rendering requests. An authenticated local client can exploit this vulnerability by sending a specially...

xorg-x11-server: xorg-x11-server: Arbitrary code execution via buffer overflow in input_constrain_cursor()

A flaw was found in xorg-x11-server. The server writes pointer barrier events into a fixed-size buffer without properly validating boundaries. An authenticated client can trigger this issue by configuring excessive pointer barriers and generating cursor motion events, causing a buffer overflow...

Important: Red Hat Security Advisory: xorg-x11-server security update

An update for xorg-x11-server is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

xorg-x11-server: xwayland: xorg-x11-server: Arbitrary code execution via double-free in XKB geometry handling

A flaw was found in the X.Org X Server and XWayland. An error handling issue in the X Keyboard Extension XKB geometry processing fails to clear a memory pointer after an allocation failure, leading to a double-free condition during cleanup. A local user can exploit this vulnerability by sending a...

CVE-2018-11235

CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow

A flaw was found in FreeIPMI. This vulnerability involves a stack-based buffer overflow that occurs when a Baseboard Management Controller BMC sends an oversized response during data reading. An attacker could exploit this by tricking an administrator into running FreeIPMI commands against a...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow in ipmi-oem

A flaw was found in FreeIPMI. A stack-based buffer overflow in the ipmi-oem utility can lead to arbitrary code execution. This vulnerability can be exploited by a local user who executes a specially crafted ipmi-oem command, potentially when processing untrusted data from a remote source...

Moderate: Red Hat Security Advisory: freeipmi security, bug fix, and enhancement update

An update for freeipmi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

FreeIPMI: FreeIPMI: Arbitrary code execution via stack-based buffer overflow

A flaw was found in FreeIPMI. A local attacker can exploit a stack-based buffer overflow vulnerability in the ipmi-oem utility when processing the dell get-system-info cmc-info subcommand. This can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected syste...

FreeIPMI: FreeIPMI: Arbitrary code execution via malformed Fujitsu System Event Log responses

A flaw was found in FreeIPMI. This vulnerability, a stack-based buffer overflow, occurs when the software processes malformed Fujitsu System Event Log SEL responses. An attacker could exploit this by providing specially crafted SEL data, potentially requiring user interaction, to achieve arbitrar...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

A flaw was found in libxml2, specifically within the xmlcatalog utility when operating in shell mode. An attacker can exploit multiple stack-based buffer overflows by providing an excessively long input line. This leads to memory corruption, which may cause the application to crash or potentially...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...

Important: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...