267120 matches found
PT-2026-71472
Name of the Vulnerable Software and Affected Versions PostgreSQL versions 18.0 through 18.4 Description A heap buffer overflow exists in the pg stat statements module. This issue allows a query author to execute arbitrary code with the privileges of the operating system user running the database ...
PT-2026-71467
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the to chartimestamptz...
Vulnerability of the kerberos_DecryptMessage() function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file of the RDP client FreeRDP, which allows a intruder to disclose sensitive information and cause a denial-of-service attack.
The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...
The vulnerability of the wireless/ti/wlcore/tx.c component of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:54659)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54659 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3579-1 advisory. - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. - CVE-2026-42789: publickey application...
Linux Distros Unpatched Vulnerability : CVE-2026-68451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Validate length for CCA ECC private key requests ccaecc2protkey derives the copy length for the CPRB parameter block directly from the length field...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)
The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....
Security Updates for Microsoft Word Products C2R (August 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...
Linux Distros Unpatched Vulnerability : CVE-2026-29035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to...
FFmpeg 0.5 < 9.0 Multiple Vulnerabilities
The version of FFmpeg installed on the remote host is 0.5 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - A signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c allows attackers to trigger a heap buffer overflow by...
SUSE SLES15: himmelblau / himmelblau-sshd-config / himmelblau-sso / etc (SUSE-SU-2026:3576-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3576-1 advisory. Security fixes: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1...
Security update for chromium (critical)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0281-1 Rating: critical References: 1274549 Cross-References: CVE-2026-19137 CVE-2026-19138 CVE-2026-19139 CVE-2026-19140 CVE-2026-19141 CVE-2026-19142 CVE-2026-19143 CVE-2026-19144 CVE-2026-19145...
Vulnerability in core server (CVE-2026-14670)
PostgreSQL plperl tied object heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL...
Vulnerability in core server (CVE-2026-14679)
PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL...
Vulnerability in core server (CVE-2026-14664)
PostgreSQL regexp heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006,...
PT-2026-71743
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A buffer overflow allows a remote authenticated attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hol...
PT-2026-71746
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...
Vim < 9.2.0842 Stack-based Buffer Overflow (GHSA-49m8-wwxj-mr69)
The version of Vim installed on the remote host is prior to 9.2.0842. It is, therefore, affected by a vulnerability as referenced in the GHSA-49m8-wwxj-mr69 advisory. - The socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors ...