121967 matches found
SUSE CVE-2026-73074
Vim is an open source, command line text editor. Prior to 9.2.0841, propaddone in src/textprop.c uses the proplen value from gettextprops to increment a uint16t property count beyond 0xffff, wrapping the count to zero and copying existing text-property records into a heap allocation sized for non...
SUSE CVE-2026-73433
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...
PT-2026-72078
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description A use-after-free issue exists in the dynamic kernel-object disposal path unref check within kernel/userspace/userspace.c. The system frees an object's storage using k freedyn-data when its...
PT-2026-72033
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...
RHEL 7 : gstreamer1-plugins-bad-free (RHSA-2026:54752)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54752 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
Oracle Linux 9 : openssh (ELSA-2026-47756)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47756 advisory. - CVE-2026-59996: Fix remote glob result of '..' causing files to be placed in unintended parent directories when scp performs remote-to-remote copy v...
Security update for himmelblau (important)
openSUSE security update: security update for himmelblau ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21573-1 Rating: important References: bsc1270946 bsc1270985 bsc1273910 bsc1273911 bsc1273912 Cross-References: CVE-2026-45784 CVSS scores:...
Memory Allocation with Excessive Size Value
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via the ES|QL query processing. An attacker can exhaust available heap memory and caus...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: floci-az, nuxeo, apicurio-registry-fips, nrjmx, pinot-fips, thingsboard, airbyte-server-fips, kayenta, airbyte-platform-fips, reposilite, airbyte-platform, zipkin, conductor-fips, geoserver, logstash, akhq, wso2is, druid, apicurio-registry, kayenta-fips,...
CVE-2026-72642
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays within the bounds of the underlying storage. A user with th...
CVE-2026-72645
Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memor...
CVE-2026-16975
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...
CVE-2026-16982
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow...
CVE-2026-16871
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...
EUVD-2026-58384
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...
CVE-2026-16975 IBM i is Affected By A Remote Code Execution Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow...
CVE-2026-16975
IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by CVE-2026-16975, which could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow. The IBM Security Bulletin details a CWE-787 (Out-of-bounds Write) condition and assigns a CVSS v3.1 base score of ...
