4650 matches found
CVE-2026-82254: Uncaught Exception
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from attacker-controlled size headers in gix-pack. Attackers can send crafted pack data during clone or fetch operations to trigger panics or out-of-memory process kills...
libgit2: libgit2: Denial of Service via Unbounded Memory Allocation
A flaw was found in libgit2. The gitdeltaapply function incorrectly trusts an attacker-controlled size value from a delta object header, which is used for memory allocation before proper validation of delta instructions. A remote attacker or local user can supply malicious pack data, for example,...
SUSE CVE-2026-77118
A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...
EulerOS Virtualization 2.13.0 : shim (EulerOS-SA-2026-3239)
According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if...
EulerOS Virtualization 2.13.1 : shim (EulerOS-SA-2026-3199)
According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if...
CVE-2026-78314
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78315
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78316
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78317
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-53585
A flaw was found in libgit2. The gitdeltaapply function incorrectly trusts an attacker-controlled size value from a delta object header, which is used for memory allocation before proper validation of delta instructions. A remote attacker or local user can supply malicious pack data, for example,...
CVE-2026-78317 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
EUVD-2026-64762
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78317
A SQL Injection vulnerability in Delta DIAEnergie v1.11.00.002 allows a network-based attacker with low privileges to achieve remote code execution , resulting in high impact to confidentiality, integrity, and availability. The NVD-assigned CVSS 3.1 score is 8.8 (High) . No specific remediation v...
CVE-2026-78317 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78316
Delta DIAEnergie v1.11.00.002 is affected by a SQL Injection vulnerability that allows a remote attacker to achieve remote code execution . The attack vector is network-based with low complexity and requires only low privileges and no user interaction , resulting in high impact across confidentia...
CVE-2026-78316 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78316 DIAEnergie - SQL Injection
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
EUVD-2026-64761
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...