266749 matches found
Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
PT-2026-71970
Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description A remote attack is possible due to a stack-based buffer overflow in the setIpQosRules function within the /cgi-bin/cstecgi.cgi file of the firewall.so component. This issue occurs when...
PT-2026-71977
Name of the Vulnerable Software and Affected Versions Tenda AC12 version 15.03.06.23 multi TD01 Description A buffer overflow occurs in the httpd web management interface when the rebootTime argument is manipulated. This issue is located within the formSetRebootTimer function of the...
PT-2026-72071
Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730 Description A stack-based buffer overflow occurs when manipulating the pin argument within the setWiFiWpsConfig function of the /cgi-bin/cstecgi.cgi endpoint, located in the wps.so component. This...
RHEL 7 : gstreamer1-plugins-bad-free (RHSA-2026:54752)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54752 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
SUSE SLED15 / SLES15 Security Update : gzip (SUSE-SU-2026:3592-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3592-1 advisory. - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state...
Exim: Multiple Vulnerabilities
Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...
PT-2026-71955
Name of the Vulnerable Software and Affected Versions Tenda AC1206 version 15.03.06.23 multi TD01 Description A stack-based buffer overflow exists in the httpd web management interface. The issue occurs within the set device name function located in the '/goform/SetOnlineDevName' endpoint when th...
AlmaLinux 10 : freerdp (ALSA-2026:54486)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability v...
The vulnerability of the Linux operating system’s kernel, related to copying buffers without checking the input data, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the driver component drivers/pmdomain/imx/imx8m-blk-ctrl.c of the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause a service failure...
Security update for himmelblau (important)
openSUSE security update: security update for himmelblau ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21573-1 Rating: important References: bsc1270946 bsc1270985 bsc1273910 bsc1273911 bsc1273912 Cross-References: CVE-2026-45784 CVSS scores:...
The vulnerability in the driver/crypto/omap-crypto.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/crypto/omap-crypto.c component of the Linux operating system’s kernel is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...
UBUNTU-CVE-2026-56853
When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this...
CVE-2026-18511
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-length buffer and execute arbitrary cod...
CVE-2026-18077
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...
CVE-2026-17476
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write...
CVE-2026-17272
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow...