8879 matches found
PT-2026-61302
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the ethtool EEPROM Netlink fallback path within the fallback set params function. While the function validates that the offset is less than eeprom len, it fails to verif...
CVE-2026-13473
IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server ...
SUSE CVE-2026-43676
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected Safa...
PT-2026-60872
Name of the Vulnerable Software and Affected Versions IBM Storage Protect Client versions 8.1.0.0 through 8.1.27.1 IBM Storage Protect Client versions 8.2.0.0 through 8.2.1.0 Description Improper bounds checking leads to a heap-based buffer overflow, which occurs when a program writes more data t...
CVE-2026-43676
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds read due to improper bounds checking, resulting in an unexpected process crash...
Microsoft Excel information leakage vulnerability (CNVD-2026-28560)
Microsoft Excel is a spreadsheet software within the Office suite developed by Microsoft Corporation. There is an information leakage vulnerability in Microsoft Excel, which stems from the inability of Excel to correctly check the heap memory boundaries when processing certain files. Attackers ca...
PT-2026-81853
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the file-xwd plugin occurs when processing specially crafted XWD image files. The plugin validates image width and bytes-per-line parameters independently instead of ensuring their...
Improper Check for Certificate Revocation
Overview app-store-server-library is a The App Store Server Library Affected versions of this package are vulnerable to Improper Check for Certificate Revocation in the SignedDataVerifier process when online revocation checking is enabled. An attacker can cause the acceptance of revoked...
fact-checking (0.0.1), hc-nlp (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2026-40171 via jupyterlab (2.2.9)
jupyterlab PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - fact-checking 0.0.1 - hc-nlp =0.1.0, =0.0.2, =0.0.5 - muvimaker 0.2.6b0 - zero-shot-re 0.0.4 Source cves: CVE-2026-40171 Source advisory:...
CVE-2026-58065 Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
The Apache Airflow Git provider runs its git-over-SSH operations with StrictHostKeyChecking=no by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server can impersonate the server man-in-the-middle, capturing the S...
CVE-2026-58065 Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
The Apache Airflow Git provider runs its git-over-SSH operations with StrictHostKeyChecking=no by default, disabling SSH host-key verification. An attacker who can intercept the network path between an Airflow worker and the Git server can impersonate the server man-in-the-middle, capturing the S...
ROS-20260713-73-0030
The vulnerability in Python-Relenv is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...
EUVD-2026-43241
The nRF70 Wi-Fi driver's power-save event handler nrfwifieventprocgetpowersaveinfo in drivers/wifi/nrfwifi/src/wifimgmt.c copied TWT Target Wake Time flow entries from an nrfwifiumaceventpowersaveinfo event into the fixed-size twtflowsWIFIMAXTWTFLOWS 8-element array of a caller-supplied struct...
CVE-2026-55187 Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)
Mailpit is an email testing tool and API for developers. Prior to 1.30.2, the remediation shipped for CVE-2026-27808 is incomplete because the tools.IsInternalIP deny-list in internal/tools/net.go relies on Go's standard library classification helpers and does not block IPv6 transition mechanisms...
AZL-92087 CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1
A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...
CVE-2026-57254
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash...
CVE-2026-56002 libXfont2 PCF Font Parsing Heap Buffer Overflow
A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...
CVE-2026-57254
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash...
EUVD-2026-42199
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash...
CVE-2026-57254 Foxit PDF Editor/Reader Annotation Type Confusion Vulnerability
There is an abnormal annotation within the PDF that is referenced by other objects. When the application parses the PDF, it fails to perform proper type checking, ultimately causing the application to crash...