34071 matches found
Google Chrome < 151.0.7922.108 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop01193673229 advisory. - Use after free in Skia. CVE-2026-19154, CVE-2026-19176 - Use after...
PT-2026-68788
Name of the Vulnerable Software and Affected Versions FFmpeg versions 4.4 through 8.x Description An out-of-bounds heap write exists in the native GoPro CineForm HD CFHD decoder. A remote attacker can corrupt heap memory by providing a specially crafted AVI file during stream probing. The issue...
CVE-2026-71255
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...
CVE-2026-71255 nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...
CVE-2026-71255 nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...
CVE-2026-71255 nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recvreaddeviceidentificationres function FC 0x2B/MEI 0x0E, Read Device Identification in nanomodbus.c. The server-supplied objectlength field 0-246 is validated only against the remaining PDU size ressizeleft and...
CVE-2026-71254 nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()
nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handlereadfilerecord function FC 0x14, Read File Record in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-request's recordlength is at most 124, but i...
SUSE-SU-2026:23121-1 Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...
SUSE-SU-2026:23144-1 Security update for php8
This update for php8 fixes the following issues - Update to version 8.4.24 - CVE-2026-7260: Stack overflow in phar with circular symlinks bsc1273077. - CVE-2026-9672: Upgrade libgd bsc1273078. - CVE-2026-17543: SQL injection in ext-pgsql via E'...' backslash breakout bsc1273075. - CVE-2026-17544:...
CVE-2026-17544
A flaw was found in PHP. A remote attacker could exploit this vulnerability by providing specially crafted inputs to the bccomp function. This could lead to an out-of-bounds write, resulting in stack and heap corruption. Such memory corruption can enable arbitrary code execution, allowing the...
gstreamer1 -- multiple vulnerabilities
The GStreamer project reports: Multiple security issues were identified and fixed in the GStreamer framework. GStreamer-SA-2026-0067: Heap buffer overflow and memory leak in JPEG 2000 decoder GStreamer-SA-2026-0068: Heap buffer overflow in QCELP RTP depayloader GStreamer-SA-2026-0069: Heap buffer...
EUVD-2026-52802
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosu...
CVE-2026-24253
NVIDIA Dynamo for Linux contains CVE-2026-24253, a vulnerability that could allow an attacker to cause an out-of-bounds write, potentially leading to denial of service and data tampering. The NVIDIA security bulletin lists this CVE under the NVIDIA Dynamo - August 2026 update, with remediation vi...
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability (CVE-2026-15057)
Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Enterprise Application Runtimes, is affected by a denial of service vulnerability due to an out-of-bounds write when servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details Ref...
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability (CVE-2026-15057)
Summary IBM WebSphere Application Server Liberty, which is bundled with IBM Cloud Pak for Applications, is affected by a denial of service vulnerability due to an out-of-bounds write when servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details Refer to...
Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service vulnerability (CVE-2026-15057)
Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a denial of service vulnerability due to an out-of-bounds write when servlet-3.1, servlet-4.0, servlet-5.0, servlet-6.0, or servlet-6.1 is enabled. Vulnerability Details Refer to t...
CentOS 9 : vim-8.2.2637-40.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-40.el9 build changelog. - netrw code injection via NetrwBookHistSave CVE-2026-47162 - possible code execution with python3complete CVE-2026-52858 - out-of-bounds...
Security Bulletin: NVIDIA Dynamo - August 2026
NVIDIA has released a software update for NVIDIA® Dynamo. To protect your system, clone or update this software from the NVIDIA ai-dynamo/dynamo GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potential vulnerabilities that this security update addresses and...
AZL-94599 CVE-2026-18508 affecting package tar 1.35-2
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary...