ROS-20261026-73-0106

The vulnerability in openssh is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261026-73-0030

The vulnerability in openssh is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

vLLM resource management error vulnerability

Versions prior to vLLM 0.32.0 contain a resource management error vulnerability. This vulnerability arises because the Phi-4 multimodal audio encoder defaults to using eager attention in phi4mmaudio.py and phi4mmutils.py. A remote client can submit a valid long audio segment, causing the full...

HashiCorp Consul input validation error vulnerability

Versions prior to HashiCorp Consul 2.1.0, as well as versions prior to HashiCorp Consul Enterprise 1.21.19 and 2.1.0, contain an input validation error vulnerability. This vulnerability stems from authorization bypass in service mesh proxy registration, potentially allowing users with write acces...

Netty-TCNative digital error vulnerability

Versions of netty-tcnative prior to 2.0.84.Final and Netty netty-tcnative-boringsl-static prior to 2.0.84.Final contain a numeric error vulnerability. This vulnerability arises from an excessive reporting of consumed bytes within the BIO write callback tcnwritetobytebuffer. Remote TLS 1.3 clients...

PT-2026-123448

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.32.0 Description An off-by-one error in the calculation of max token id within vllm/tokenizers/hf.py allows a pre-tokenized prompt ID equal to the vocabulary size to pass validation. When the tensor-parallel size is on...

Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a buffer error vulnerability. This vulnerability stems from how the afcfileopen function in the src/afc.c file within the AFC File Handler component handles the bytes parameter, potentially leading to an out-of-bounds read...

BenoitC Hackney resource management error vulnerability

Versions 2.0.0-beta.1 through 4.9.0 of benoitc hackney contain a resource management error vulnerability. This vulnerability arises because hackneyconn fails to restrict or throttle resource allocation; as a result, hackney:request/5 and hackney:body/1 return full response bodies without limiting...

zip-rs zip input validation error vulnerability

A security vulnerability exists in zip-rs versions from zip 0.6.0 up to but not including version 9.0.0. This vulnerability arises because the AES entry reader in src/aes.rs validates HMAC only when the data counter controlled by the attacker is set to zero. However, when the underlying bounded...

Libyal libfvde buffer error vulnerability

Versions of libyal libfvde prior to 20260923 contain a buffer error vulnerability. This vulnerability arises because libfvdeencryptedmetadatareadtype0x001a performs an unbounded strlen operation on embedded XML plist data. An attacker can supply a specially crafted FileVault 2 volume containing...

lxsmnsyc seroval resource management error vulnerability

In versions lxsmnsyc seroval from 1.4.1 up to but including 1.6.8, there is a resource management error vulnerability. This vulnerability arises because fromJSON and fromCrossJSON fail to require that the list of elements in array nodes be an actual array. A specially crafted payload can allow...

2K Games Sid Meier’s Civilization IV buffer error vulnerability

Version 1.0.12.68 of Civilization IV by 2K Games contains a buffer error vulnerability. This vulnerability arises from type confusion occurring during manipulation in the loadstring function within the Lua sandbox component, and it may be exploited remotely to carry out attacks...

Mattermost resource management error vulnerability

Mattermost versions 11.9.1 and earlier within the 11.9.x series, 11.8.5 and earlier within the 11.8.x series, 11.7.10 and earlier within the 11.7.x series, and 11.10.1 and earlier within the 11.10.x series contain a resource management error vulnerability. This vulnerability arises from the lack ...

iFLYTEK Astron Agent input validation error vulnerability

Versions 1.1.2 and earlier of iFLYTEK Astron Agent contain an input validation error vulnerability. This vulnerability stems from an incomplete blacklist issue involving an unknown function in the file core/memory/database/api/v1/execddl.py within the DDL Whitelist Handler component. It may allow...

Apache Camel input validation error vulnerability

Security vulnerabilities exist in Apache Camel versions 4.0.0 through 4.18.5 and 4.19.0 through 4.22.2. These stem from the XQueryBuilder in camel-saxon, which uses the default Saxon Configuration to parse stream-based Source message bodies. No restrictions are placed on DOCTYPE declarations or...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, and Apple visionOS versions...

Maccmspro Maccms10 input validation error vulnerability

The MaccmsPro Maccms10 contains an input validation error vulnerability. This vulnerability stems from a batch assignment issue in index/Comment::saveData. Unauthenticated attackers can submit anonymous comments by using a specially crafted userid parameter, setting arbitrary values for the...

PT-2026-123244

A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the function verifyiprange of the file lib/Flux/PaymentNotifyRequest.php of the component PayPal IPN Handler. The manipulation of the argument X-Real-IP leads to origin validation...

Fedora 46 : ags (2026-1664c569e1)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1664c569e1 advisory. Automatic update for ags-3.6.2.22-1.fc46. Changelog Mon Oct 26 2026 Dominik Mierzejewski - 3.6.2.22-1 - update to 3.6.2.22 resolves rhbz2558938 - backport...

Python Social Auth - Core input validation error vulnerability

Python Social Auth versions prior to Core 6.2.0 contain a security vulnerability. This vulnerability arises because OpenIdConnectAuth stores the OpenID Connect nonce in a shared OpenIdConnectAssociation table. It only verifies that the nonce exists and has not expired; it fails to bind this nonce...