27248 matches found
CVE-2026-76722
Uncontrolled format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs . This flaw could allow an unauthenticated remote attacker to execute arbitrary commands on the underlying host. Successful exploitation may lead to a Denial-of-Service (DoS) or potential r...
Important: Red Hat Security Advisory: gdb security update
An update for gdb is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
ROS-20260929-73-0148
The vulnerability of the net/mlx5 component in the Linux operating system is related to insufficient handling of format strings. Exploiting this vulnerability can allow an attacker to cause a service failure...
Amazon Linux 2 : gdb (ALAS-2026-3958)
The version of gdb installed on the remote host is prior to 8.0.1-36. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3958 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal...
Amazon Linux 2023 : gdb, gdb-gdbserver, gdb-headless (ALAS2023-2026-3142)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3142 advisory. A flaw was found in GDB's STABS debug format parser. Thereadmemberfunctions function in gdb/stabsread.c contains a linkedlist removal bug in the code that separates destructor and non- destructormember...
Important: crash
Issue Overview: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in...
CVE-2026-76729: Use of Externally-Controlled Format String
A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service condition or remote...
CVE-2026-76722: Use of Externally-Controlled Format String
Uncontrolled Format string vulnerabilities exist in the affected interface of HPE Networking Instant ON APs that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation could result in a Denial-of-service or potential remote code...
PT-2026-102873
🚨 CVE-2026-76729 A format string vulnerability in the API endpoint of HPE Networking Instant ON APs could allow an authenticated remote attacker with high privileges to cause memory corruption with a modified input. Successful exploitation could allow an attacker to provoke a denial-of-service...
PT-2026-102866
Name of the Vulnerable Software and Affected Versions HPE Networking Instant ON APs affected versions not specified Description An uncontrolled format string issue exists in the affected interface, which could allow an unauthenticated remote attacker to execute arbitrary commands on the underlyin...
ALSA-2026:73425 Important: gdb security update
The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data. Security Fixes: gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 For more details about the...
Important: gdb
Issue Overview: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug in the code that separates destructor and non-destructor member functions of C++ classes. The bug causes the destructor entries to remain in...
RHEL 8 : gdb (RHSA-2026:73425)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:73425 advisory. The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then...
Important: gdb security update
The GNU Debugger GDB allows debugging programs written in C, C++, Java, and other languages by executing them in a controlled fashion and then printing their data. Security Fixes: gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 For more details about the...
EUVD-2026-76027
morgan vulnerable to Log Injection via unescaped double quote in quoted log fields...
morgan vulnerable to Log Injection via unescaped double quote in quoted log fields
Impact Morgan writes attacker-controlled request data to the access log. Its escaping added in 1.11.0 and 1.12.0 neutralizes control characters, the Unicode line separators, and backslash, but not the double quote 0x22, which is the field delimiter of the Apache combined log format morgan emits. ...
CVE-2026-102271
A flaw was found in PyJWT. The library fails to identify asymmetric public keys supplied in Distinguished Encoding Rules DER format, inadvertently treating the public data as a shared secret in Hash-based Message Authentication Code HMAC operations. If an application supports both asymmetric and...
The vulnerability of the TACACS+ protocol implementation in the tac_plus authentication daemon allows a perpetrator to execute any code with root privileges.
The vulnerability of the TACACS+ protocol implementation in the tacplus authentication daemon is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...
...[ More ]
GDCM Grassroots DICOM is an open-source C++ library for reading, writing, and processing DICOM Digital Imaging and Communications in Medicine medical imaging files. The gdcmFilenameGenerator component, used by the gdcmraw command-line tool to generate output filenames for split fragments, is...
