4851 matches found
CVE-2026-2006: Improper Validation of Array Index
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12,...
Vulnerability in core server (CVE-2026-2006)
PostgreSQL missing validation of multibyte character length executes arbitrary code Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the...
The vulnerability of the ext4_bmap_bit_set function in the lwext4 library allows a attacker to execute arbitrary code and cause a service failure.
The vulnerability of the ext4bmapbitset function in the lwext4 library arises from writing beyond the buffer of the block bitmap when processing a specially crafted ext image. Exploitation of this vulnerability could allow an attacker to execute arbitrary code and cause service failures...
ROS-20260209-73-0047
Vulnerability in golang related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
The vulnerability of the fromSetWifiGusetBasic() function in Tenda AC8 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetWifiGusetBasic function in the Tenda AC8 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the shareSpeed parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module of the Linux file system’s JFS kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the sddr55_write_data() function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sddr55writedata function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s device driver framework is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-36383
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overrun can occur in the me2600 xilinx download function when loading firmware requested by request firmware. The function reads a data stream length into the file length variab...
Fedora 43 : xen (2026-844012d662)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-844012d662 advisory. x86: buffer overrun with shadow paging + tracing XSA-477, CVE-2025-58150 x86: incomplete IBPB for vCPU isolation XSA-479, CVE-2026-23553 Tenable has...
The vulnerability of the BIO_f_linebuffer() function in the OpenSSL library, which allows a hacker to cause a service failure
The vulnerability of the BIOflinebuffer function in the OpenSSL library is related to the situation where the operation’s output goes beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the sev_migrate_from() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.
The vulnerability of the sevmigratefrom function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to...
RLSA-2023:7884 Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-5868 postgresql: extension script @substitutions@...
ROS-20260203-73-0011
A vulnerability in the schets.c component of the Linux operating system kernel is related to an operation exceeding buffer boundaries. Exploitation of the vulnerability may allow an attacker to affect data integrity...
ROS-20260203-73-0029
A vulnerability in the hugememory.c component of the Linux kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability allows an attacker to cause a denial of service...
The vulnerability of the qla2xxx_process_purls_iocb() function in the drivers/scsi/qla2xxx/qla_nvme.c driver module of the Linux SCSI device kernel driver allows a hacker to cause a service failure.
The vulnerability of the qla2xxxprocesspurlsiocb function in the drivers/scsi/qla2xxx/qlanvme.c driver for Linux SCSI device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Content Distribution Service (NomadBranch.exe) software platform for remote management of 1E Client allows a perpetrator to trigger a service failure.
The vulnerability of the Content Distribution Service NomadBranch.exe software platform for remote management of 1E Client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending...
The vulnerability of the Content Distribution Service (NomadBranch.exe) software platform for remote management of 1E Client allows a malicious individual to disclose protected information or cause service failure.
The vulnerability of the Content Distribution Service NomadBranch.exe software platform for remote management of 1E Client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause...
MGASA-2026-0026 Updated xen packages fix security vulnerabilities
x86: buffer overrun with shadow paging + tracing. CVE-2025-58150 x86: incomplete IBPB for vCPU isolation. CVE-2026-23553...
