Lexi Wilson exposed a resource management error vulnerability

Versions 0.1.0 and later of esaml contain a resource management error vulnerability. This vulnerability arises because esamlbinding:decoderesponse/2 decodes a SAMLResponse provided by an attacker using base64 encoding, then decompresses it via zlib:unzip/1 without restricting the output size. Pri...

Roundcube Webmail Project Roundcube Webmail Input validation error vulnerability

The Roundcube Webmail project contains an input validation error vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from incomplete recognition of CSS escape sequences when processing the FuncIRI attribute, allowing remote content to be bypassed. As a...

EUVD-2026-66564

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-114118

A flaw was found in Vyper. When deploying smart contracts from blueprints reusable contract templates, the createfromblueprint function calculates remaining code size without verifying that the offset is within the template boundaries, causing an integer calculation error. A remote attacker...

PHP2Shell: When PHP Runs Out of Memory at the Wrong Moment

A family of runtime memory safety vulnerabilities, with impacts ranging from worker crashes and data disclosure to pre-authentication remote code execution. Introduction Researchers from Wiz, OpenAI, and Calif jointly disclosed PHP2Shell CVE-2026-109618 and CVE-2026-109619, a set of memory safety...

BIT-PARSE-2026-110854 Parse Server before 8.6.97 and 9.10.2 Denial of Service via Unhandled Email Error

Parse Server before 8.6.97 and 9.0.0 before 9.10.2 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A client holding only the public application keys can sign up, request a verification email, or request a password reset while...

Security update for libheif

This update for libheif fixes the following issues: CVE-2026-84449: hOpRGB2432toYCbCr Memory Access Error / SEGV bsc1281829. Out-of-bounds read and write in derived-item and pixel-plane handling bsc1279444. Patch Instructions: To install this SUSE update use the SUSE recommended installation...

CLSA-2025-1747430081 Fix of 47 CVEs

CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...

BIT-MYSQL-CLIENT-2026-97380 MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

BIT-MARIADB-MIN-2026-97380 MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

BIT-MARIADB-2026-97380 MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

Exploit for CVE-2026-85315

CVE-2026-85315 — camel-grpc: consumer exception disclosure Ru...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because Redis’s inline command parsing allocates memory and copies the entire input buffer based on its current size before determining the command boundary; there is no proper lim...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php contains an input validation error vulnerability. This vulnerability arises because the include function in the index.php file processes the ‘page’ parameter, resulting in file inclusion and potential remote exploitation...

Pillow resource management error vulnerability

Versions of Pillow prior to 13.0.0 contain a resource management error vulnerability. This vulnerability arises because the TarIO initializer in src/PIL/TarIO.py accepts negative octal member sizes and performs backward addressing, resulting in the return of the same 512-byte header. When the...

Vyper numeric error vulnerability

In Vyper versions 0.3.8 through 0.5.0b1, there is a numeric error vulnerability stemming from improper optimizer compilation. Under conditions where -O gas or -O codesize is enabled, expressions such as msg.value | K or lenmsg.data | K are compiled as a constant value of 1 when used as ternary...

WSO2 API Manager input validation error vulnerability

Versions prior to WSO2 API Manager 3.1.0.313; versions prior to 3.2.0.406 for 3.2.0; versions prior to 3.2.1.30 for 3.2.1; versions prior to 4.0.0.324 for 4.0.0; versions prior to 4.1.0.185 for 4.1.0; versions prior to 4.2.0.124 for 4.2.0; versions prior to 4.3.0.36 for 4.3.0 and versions prior t...

Apache Traffic Server resource management error vulnerability

Versions 9.2.15, 10.1.4, and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability arises because unrestricted diagnostic log entries are written for each stripped internal @header. Requests containing numerous such headers cause the proxy to write...

Amazon Linux 2023 : device-mapper-persistent-data (ALAS2023-2026-3217)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3217 advisory. Fix RUSTSEC-2026-0190: Unsoundness in Error::downcastmut Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for th...