52758 matches found
MINI-M8MM-M3F2-4X22
Bulletin has no description...
MINI-PR4V-GVQ2-4923
Bulletin has no description...
MINI-JPGJ-3244-M5P2
Bulletin has no description...
CVE-2026-45699 Netatalk has Integer Underflow → Stack Buffer Overflow in copydir()
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-49263
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
MINI-2XQP-2P4C-J3MM
Bulletin has no description...
CVE-2026-12363
CVE-2026-12363 : The LoRaWAN Fragmented Data Block Transport service does not validate frag_counter in DATA_FRAGMENT before passing it to the decoder. frag_counter is derived from the payload (frag_index_n & 0x3FFF) and, when 0, causes fragCounter − 1 to underflow, writing out of bounds in the de...
CVE-2026-49263
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
CVE-2026-49263 Capstone WASM `br_table` instruction-size truncation can cause no-progress disassembly and parser desynchronization
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes through the public csdisasm and csdisasmiter APIs. For a large but well-formed brtable instruction, the WASM decoder accumulates the immediate...
CVE-2026-49282 Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
MINI-7M47-CQX6-J3FG
Bulletin has no description...
Insecure Randomness
Spring AMQP is vulnerable to Predictable Correlation Identifier vulnerability as per NVD Description or CWE-330. The vulnerability is due to correlation IDs for RabbitTemplate.sendAndReceive replies being generated using a predictable internal counter, which allows an attacker to predict...
MINI-7Q64-M7HV-HXHQ
Bulletin has no description...
MINI-729C-C9W4-QVX4
Bulletin has no description...
MINI-Q53C-2FQ2-22R3
Bulletin has no description...
MINI-FR32-38HG-Q268
Bulletin has no description...
MINI-GMX2-C4VW-66HM
Bulletin has no description...
CVE-2026-56860
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
CVE-2026-56853
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...