CVE-2011-4862

CVE-2011-4862 Final Project for Security and Privacy CS 600.443 | Fall 2018 I originally tried to use diff to make a patch. I patched it the way I thought it would be, before looking at the real patch. encrypt.patch is this original patch that I made with teh diff. However, when we tried applying...

CLEANSTART-2026-GY32119 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query

Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...

Security Bulletin: This Power System update is being released to address CVE-2026-17427

Summary The BMC's HTTPS service allows unauthenticated attackers to crash the BMC's HTTPS service, resulting in denial of service. Vulnerability Details CVEID:CVE-2026-17427 DESCRIPTION: OPENBMC could allow a remote attacker to cause a denial of service due to improper validation of input length...

CVE-2026-86983: Apple swift-crypto: A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API…

A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API without bounding its length. This vulnerability is addressed in swift-crypto version 5.0.3...

ROS-20261027-73-0051

A vulnerability in Tomcat related to improper handling of input length parameters. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CLEANSTART-2026-SY87191 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query

Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...

PT-2026-135185

Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...

kernel: Fix of 39 CVEs

nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Fixed a issue where user input was not validated using setsockopt. The length of user input was checked before data was copied...

Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I received multiple syzbot reports indicating that old bugs exposed by BPF after commit 20f2505fb436 “bpf: Try to avoid kzalloc in cgroup/s,getsockopt” The optlen argument passed...

CVE-2026-102074

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

EUVD-2026-98407

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102074

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CLEANSTART-2026-RH85110 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query

Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...

Huawei HarmonyOS Out-of-Bounds Write Vulnerability (CNVD-2026-37863)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a boundary-crossing write vulnerability. This vulnerability arises from the rendering and synthesis modules failing to correctly verify the length of the inpu...

Astra Linux – Vulnerability in grub2

The “read” command is used to read the keyboard input from the user. While reading, the input length is stored as a 32-bit integer value. This value is then used to reallocate the line buffer to accommodate the next character. During this process, if the line is long enough, it’s possible for thi...

Astra Linux – Vulnerability in node-moment

moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Versions of moment that were affected use an inefficient parsing algorithm. Specifically, the string-to-date parsing method used by moment more precisely, the rfc2822 parsing method, which is used by...

CVE-2026-9637

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

EUVD-2026-69133

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

CVE-2026-9637 CompactLogix® 5380 / ControlLogix® 5580 - Multiple Vulnerabilities

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...