108059 matches found
EUVD-2026-98830
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-102699
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-102699
The Xen hypervisor is affected by an integer underflow vulnerability (CWE-191 ) within the GNTTABOP_cache_flush function. This issue was introduced as a side effect of a previous fix for overflows in guest cache flushing. On 64-bit Arm systems, the underflow can trigger an excessively long loop, ...
CVE-2026-102702 Arm: multiple issues with GNTTABOP_cache_flush
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-104005
A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...
CVE-2026-104004 Collection validators using collation-accepting expressions can crash MongoDB Server on insert
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...
EUVD-2026-98820
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...
CVE-2026-104004
The MongoDB Server collection validation feature contains a vulnerability where it may not properly handle specific expressions stored in a validator. This flaw can cause the server process to crash and stop running when a document is subsequently inserted. The issue is triggered by collation-acc...
CVE-2026-104004
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...
Collection validators using collation-accepting expressions can crash MongoDB Server on insert
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...
CVE-2026-96299 Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service
A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...
EUVD-2026-98812
A security issue was discovered in MongoDB mongos the sharded cluster router where an authenticated user with readWrite privileges could crash the mongos process by crafting a specially formed aggregation pipeline. The issue leverages an internal aggregation stage that lacks proper authorization...
CLSA-2026-1791905030 ImageMagick: Fix of 9 CVEs
CVE-2026-106571: check the pixel cache nexus size calculation for overflow - CVE-2026-106573: limit macro expansion in the MVG renderer - CVE-2026-106578: fix an invalid free in the MVG decoder by correcting the CheckPrimitiveExtent call - CVE-2026-106579: check the coder name against the...
CVE-2026-96297
The MongoDB Server is vulnerable to a Use After Free (CWE-416) condition within its aggregation feature . When an internal aggregation stage is used in conjunction with a batch size of 0 , the server may read from memory areas that have already been released. This flaw allows an authenticated use...
CVE-2026-97334
The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe server, Web Server, Command Center, MediaAgents, clients, and...
DEBIAN-CVE-2026-95115
Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser...
DEBIAN-CVE-2026-95127
An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...
CVE-2026-95115
Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser...
DEBIAN-CVE-2026-95114
libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service...
CVE-2026-77375
SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality o...