14996 matches found
UBUNTU-CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
The CVE concerns the open62541 library. Vulnerable: UA_Variant arrayDimensions product computation. Root cause: integer overflow that may cause an out-of-bounds write. Impact (per documents): network-accessible by remote attacker with low privileges, high impact to confidentiality, integrity, and...
CVE-2026-63559
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-63559 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
SUSE CVE-2026-26933
Improper Validation of Array Index CWE-129 in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation CAPEC-153. An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger...
PT-2026-66619
Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An integer overflow occurs during the UA Variant arrayDimensions product computation. This flaw allows a remote attacker to perform an out-of-bounds read of heap memory, which may lead to t...
CVE-2026-56850: Improper Authentication
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
EUVD-2026-51252
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
PT-2026-66526
SQLite 3.41 is vulnerable to use after free in the jsonArrayLengthFunc function...
PT-2026-66621
Name of the Vulnerable Software and Affected Versions open62541 affected versions not specified Description An integer overflow occurs during the arrayDimensions product computation within the UA Variant structure. This flaw allows a remote attacker to trigger an out-of-bounds write, which involv...
PT-2026-66473
e107 prior to version 2.3.8 contains a code execution vulnerability in the e array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the user prefs column. The e array::unserialize function in e107...
CVE-2026-10684
CVE-2026-10684 affects Zephyr's coredump print shell: in coredump_shell.c, print_coredump_hdr() uses the 16-bit tgt_code as an index into a fixed 7-element coredump_target_code2str[] without bounds checks, enabling an out-of-bounds read of a pointer to a string. A stored coredump with tgt_code &g...
GHSA-7C26-995W-6F47 veraPDF Parser DoS via PostScript Type 1 Font Programs
Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 1 font /FontFile is a font program containing attacker-supplied PostScript. veraPDF's Type 1 font...
GHSA-JRMC-QG6P-94FP veraPDF Parser DoS via PostScript CMap Streams
Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...
veraPDF Parser DoS via PostScript CMap Streams
Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 0 font /Encoding or any /ToUnicode is a CMap stream containing attacker-supplied PostScript. veraPDF...
CVE-2026-13425
The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2026-13425 Database for CF7 <= 1.2.6 - Unauthenticated Stored Cross-Site Scripting via Array Form Field Values
The Database for CF7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Array Form Field Values in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...