30352 matches found
SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:2987-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2987-1 advisory. - CVE-2026-5435: resolv: More types as unknown in nssprintrrf bsc1263656, BZ 34033 - resolv: Check for inetntop failure in nssprintrrf -...
The vulnerability of the `bond_xmit_broadcast` function in the `drivers/net/bonding/bond_main.c` file of the Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the bondxmitbroadcast function in the drivers/net/bonding/bondmain.c file of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-60159
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description A memory leak exists in the MIFF encoder. This issue occurs when a memory allocation fails during the processing of MIFF images, which can result in a...
ALSA-2026:39798 Important: python3.9 security, bug fix, and enhancement update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
PT-2026-60160
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description A memory leak exists in the ICON decoder that occurs when a memory allocation fails. Processing a specially crafted ICON file that triggers this...
PT-2026-60155
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions prior to 6.9.13-51 Description A memory leak occurs during the hough lines operation when a specific operation fails. A memory leak is a failure in a program to release discarded...
The vulnerability of the Apache HTTP Server’s web server, related to the violation of the buffer limit, allows attackers to trigger a service failure.
The vulnerability of the Apache HTTP Server is related to a violation of the buffer limit. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...
The vulnerability of the mod_xml2enc module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol allows a intruder to cause a service failure.
The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the mod_proxy_html module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modproxyhtml module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, related to insufficient resource control during its existence, allows attackers to trigger service failures.
The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...
JLSEC-2026-731 In `TLSX_EchChangeSNI`, the ctx->extensions branch set extensions unconditionally even when...
In TLSXEchChangeSNI, the ctx-extensions branch set extensions unconditionally even when TLSXFind returned NULL. This caused TLSXUseSNI to attach the attacker-controlled publicName to the shared WOLFSSLCTX when no inner SNI was configured. TLSXEchRestoreSNI then failed to clean it up because its...
GHSA-MF78-3RPF-R784 Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode
Summary Anyquery's server mode lacks input sanitization and access control over its built-in SQLite virtual table modules e.g., csvreader, logreader. Unauthenticated attackers connecting to the MySQL-compatible server port can create virtual tables pointing to local files on the system e.g.,...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-50646
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-48489
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied failurepath parameter when failureforward: true was enabled, allowing an unauthenticated...
CVE-2026-48489
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, DefaultAuthenticationFailureHandler honored the request-supplied failurepath parameter when failureforward: true was enabled, allowing an unauthenticated...
