89593 matches found
Vyper buffer error vulnerability
In version 0.1.0b4 of Vyper prior to 0.3.0, there is a buffer error vulnerability. This vulnerability arises when internal function calls occur within tuples or nested calls, causing an incorrect stack top pointer. It may lead to memory corruption, resulting in contracts returning corrupted value...
Apache bRPC buffer error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises from an out-of-bounds read during URL parsing and case-insensitive header lookup on platforms where plain char is unsigned e.g., ARM64, potentially allowing remote attackers to cause process...
Pillow resource management error vulnerability
Versions of Pillow from 11.2.1 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because Arrow assumes that image rows are tightly packed and exports them from im-blocks0.ptr. It fails to properly handle row padding or alignment offsets...
Sentry processing logic error vulnerability
Versions prior to Sentry 9.36.0 through 9.47.2, 10.0.0-alpha.0 through 10.75.2, and 11.0.0-alpha.0 through 11.0.0-rc.1 contain a logic error vulnerability. This vulnerability arises because the webpack integration for @sentry/nextjs bypasses application middleware under the configured tunnelRoute...
PT-2026-120803
Name of the Vulnerable Software and Affected Versions Django REST framework versions 3.12.0 through 3.18.1 Description The TokenProxy.delete function in rest framework/authtoken/models.py incorrectly uses the proxy's user-id primary key instead of the concrete Token token-string primary key to...
Lovell Fuller sharp buffer error vulnerability
Versions prior to Lovell Fuller Sharp 0.35.4 contain a buffer error vulnerability. This vulnerability stems from the inclusion of the vulnerable libheif dependency; when processing malicious AVIF/HEIF inputs, it triggers a decoding flaw in libheif, potentially leading to remote code execution...
Splunk Enterprise resource management error vulnerability
Versions prior to Splunk Enterprise 10.4.4, 10.2.8, 10.0.11, and 9.4.16 contain a resource management error vulnerability. This vulnerability arises because REST API endpoints fail to restrict resource usage when handling response field selections; as a result, users lacking the admin or power...
WSO2 API Manager input validation error vulnerability
Versions prior to WSO2 API Manager 3.1.0.313; versions prior to 3.2.0.406 for 3.2.0; versions prior to 3.2.1.30 for 3.2.1; versions prior to 4.0.0.324 for 4.0.0; versions prior to 4.1.0.185 for 4.1.0; versions prior to 4.2.0.124 for 4.2.0; versions prior to 4.3.0.36 for 4.3.0 and versions prior t...
Apache bRPC buffer error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises because the Discovery naming service reply parser fails to validate whether JSON values represent objects before invoking the RapidJSON accessor, which is designed solely for objects. When...
Apache bRPC resource management error vulnerability
Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the stream message reassembly path does not limit the cumulative size of fragmented messages upon resending them. Remote attackers can send an infinite stream of resending...
Michelle Tilley TOML Parser for Node.js resource management error vulnerability
Michelle Tilley: Versions of the TOML Parser for Node.js prior to 5.0.1 contain a resource management error vulnerability. This vulnerability arises because the addTableArray function in lib/compiler.js re-scans the entire set of assignedPaths and valueAssignments records for each array table...
Multiple Cisco Products Snort 3 DoS Vulnerabilities (cisco-sa-snort3-misc-dos-6mB22qAK_CVE-2026-76489)
According to its self-reported version, Cisco ASA Software is affected by a vulnerability. - Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to...
Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104511)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104511 advisory. - Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rul...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142340)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142340 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving...
Linux Distros Unpatched Vulnerability : CVE-2026-113239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...
Amazon Linux 2023 : loupe (ALAS2023-2026-3216)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3216 advisory. Fix RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot Fix RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2 Fix RUSTSEC-2026-0190: Unsoundness in...
Linux Distros Unpatched Vulnerability : CVE-2026-110036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted devic...
SUSE CVE-2026-98722
In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...
