262279 matches found
CVE-2026-70415
Dell PowerStore SDNAS has a buffer-copy flaw in its NFS/RPC stack, exploitable by an unauthenticated remote attacker to achieve command execution and DoS. CVSS 3.1 scores it HIGH (8.1). Dell advisory DSA-2026-330 covers the fix; no in-the-wild exploitation is reported. Apply Dell's security updat...
RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max
Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...
EUVD-2026-61046
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...
CVE-2026-75784
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched...
CVE-2026-59949
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...
CVE-2026-59949
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...
CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...
CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...
CVE-2026-63632
onnx versions 1.3.0–1.22.0 have an unchecked rank access in Gemm_7_6::adapt_gemm_7_6() (gemm_7_6.h:41) when downgrading opset 7→6; a Gemm node with undersized input tensors triggers a 16-byte heap-buffer-overflow READ. A working 186-byte PoC exists. Upgrade to onnx ≥1.22.0.
MINI-4PQC-4FFF-7VJQ
Bulletin has no description...
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...
CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1
CVE-2026-71227 affecting package libkcapi for versions less than 1.5.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-40468 affecting package gawk for versions less than 5.2.2-2
CVE-2026-40468 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-32327 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-20346 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20346 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20337 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...