100229 matches found
OPENSUSE-SU-2026:21508-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...
SUSE CVE-2026-16530
A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...
openSUSE 16 Security Update : apptainer (openSUSE-SU-2026:21499-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21499-1 advisory. Changes in apptainer: - Update to version 1.5.3: If the ptrace system call does not work while building an image as an unprivileged user, skip...
PT-2026-67284
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A null pointer dereference occurs during the cleanup of smartcard device control requests when reader-state decoding fails. An attacker can trigger a process crash by sending malformed smartcard IRP...
PT-2026-67268
Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.29.0 Description A null pointer dereference occurs in smartcard cache request decoders when they accept NULL NDR pointers for LookupName during SCARD IOCTL READCACHEA and SCARD IOCTL WRITECACHEA operations. If...
GHSA-PJXJ-PCHX-4C3M ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash...
CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
UBUNTU-CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
JLSEC-2026-1086 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow...
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in ntpsec
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
CVE-2026-18321
CVE-2026-18321 describes a buffer overflow in NTPsec’s Zyfer refclock that can crash ntpd via a local attack. The CVE is listed as a classic buffer overflow (Buffer Copy without Checking Size of Input) affecting ntpsec, but the provided documents do not specify affected versions, exact vulnerable...
CVE-2026-18321
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
EUVD-2026-51593
Buffer overflow in NTPsec's Zyfer refclock allows local attacker to crash ntpd...
SUSE CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
SUSE CVE-2026-13379
The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...