NewStart CGSL MAIN 7.02 : libxml2 Multiple Vulnerabilities (NS-SA-2026-0087)

The remote NewStart CGSL host, running version MAIN 7.02, has libxml2 packages installed that are affected by multiple vulnerabilities: - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an...

EulerOS 2.0 SP12 : gawk (EulerOS-SA-2026-3259)

According to the versions of the gawk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Integer overflow vulnerability has been found in 'builtin.c' program file of gawk. This issue may lead to memory exhaustion on the hosting operating...

CVE-2008-0600

creationtimestamp| type| source ---|---|--- 2026-09-07 22:00:05+00:00| seen| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0 2026-09-08 00:00:09+00:00| published-proof-of-concept| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0 2026-09-09 05:00:06+00:00| seen|...

Exploit for Out-of-bounds Write in Libtiff

CVE-2023-52356 – libtiff TIFFReadRGBATileExt Analysis Over...

Security update for lcms2

This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:4056-1 Security update for lcms2

This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994...

CVE-2026-86143

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

CVE-2026-86142

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

CVE-2026-86139

A flaw was found in libxml2. An integer overflow vulnerability exists in the xmlURIEscapeStr function within uri.c. This flaw could potentially lead to memory corruption, allowing an attacker to achieve information disclosure or arbitrary code execution. Mitigation To mitigate this developers mus...

CVE-2026-86138

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

GHSA-XRQW-3RRV-VX5W vulnerabilities

Vulnerabilities for packages: open-webui, text-generation-inference...

USN-8734-1: PHP vulnerabilities

It was discovered that PHP incorrectly handled Apache map decoding in SOAP servers with a typemap configured. A remote attacker could use this issue to cause a NULL pointer dereference, resulting in a denial of service. CVE-2026-7262 It was discovered that PHP incorrectly handled signed integer...

CVE-2026-84732

A flaw was found in OpenVPN. Remote unauthenticated attackers can cause a denial of service by sending specially crafted network inputs. These inputs trigger a timeout integer overflow during the retransmission of acknowledgment ACK packet IDs, which can make the OpenVPN service unavailable...

CLSA-2026-1788777401 gimp: Fix of 7 CVEs

CVE-2026-18301: validate the PSD channel data allocation with a checked multiplication and fail cleanly instead of overflowing the rawdata buffer - CVE-2026-18302: pass the correct row stride to convertint2uint when loading separate-plane TIFFs so the conversion cannot write past the end of the...

SUSE-SU-2026:23659-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

SUSE-SU-2026:23643-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

OPENSUSE-SU-2026:21782-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion...

CLSA-2026-1788774195 gimp: Fix of 7 CVEs

CVE-2026-18301: validate the PSD channel data allocation with a checked multiplication and fail cleanly instead of overflowing the rawdata buffer - CVE-2026-18302: pass the correct row stride to convertint2uint when loading separate-plane TIFFs so the conversion cannot write past the end of the...

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...

SUSE-SU-2026:4044-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issue: - CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078...