409460 matches found
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 have a buffer overflow vulnerability. This vulnerability stems from memory corruption in the V8 engine, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a heap buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute arbitrary code through the network...
HPE NonStop EXPAND buffer error vulnerability
The HPE NonStop EXPAND T9057L02 AIG and earlier versions contain a buffer error vulnerability stemming from an out-of-bounds memory read...
Konstanty Bialkowski libmodplug buffer error vulnerability
Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the nPat parameter in the CSoundFile::ReadDSM function is not validated against MAXPATTERNS. Attackers can exploit this vulnerability by providing a...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer error vulnerability, which stems from a heap buffer overflow. This vulnerability could allow unauthorized attackers to execute code via the network...
OpenSlide buffer error vulnerability
OpenSlide 4.0.1 and earlier versions have a buffer error vulnerability. This vulnerability stems from MIRAX readers’ ability to read beyond the heap boundary. Attackers can exploit this by using specially crafted Slidedat.ini values to access elements of the slidepositions array that are outside...
UADE buffer error vulnerability
Versions of UADE 3.05 and earlier contain a buffer error vulnerability. This vulnerability stems from the unsigned buffersize subtraction operation in the amifilemagic.c file’s UADEfilemagic function, which can cause a wrap when dealing with short inputs. This leads to out-of-buffer reading,...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 155.0.8059.84 contain a buffer overflow vulnerability caused by core memory corruption. This vulnerability could allow remote attackers to read memory through specially crafted HTML pages...
PAN-OS: Denial of Service (DoS) on Panorama
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service DoS condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode. Cloud...
CVE-2026-86856
A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or memory corruption. Mitigation Avoid using the nfp vDPA driver in production until patched. Do not attach untrusted...
CVE-2026-86849
A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto backend. Mitigation Do not attach a virtio-crypto vhost-user backend to untrusted guests...
CVE-2026-86562
A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler. Mitigation No mitigation is currently available...
DEBIAN-CVE-2026-93479
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
ALPINE-CVE-2026-93479
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
AZL-108461 CVE-2026-93479 affecting package nginx for versions less than 1.30.6-1
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
CVE-2026-93479
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
ALPINE-CVE-2026-15176
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
DEBIAN-CVE-2026-15176
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...