7291 matches found
KB5124012: Windows 11 Version 26H1 Security Update (September 2026)
The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
CVE-2026-66307: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
KB5122880: Windows 11 version 23H2 Security Update (September 2026)
The remote Windows host is missing security update 5122880. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
CVE-2026-69276: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
USN-8731-1: MiniUPnPd vulnerability
It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remote attacker could use this issue to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote...
USN-8731-1 miniupnpd vulnerability
It was discovered that MiniUPnPd contained an integer underflow vulnerability in SOAPAction header parsing. A remote attacker could use this issue to cause a denial of service or information disclosure by sending a malformed SOAPAction header with a single quote...
Linux Distros Unpatched Vulnerability : CVE-2026-18355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the...
CVE-2026-18355: Integer Underflow (Wrap or Wraparound)
A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
No d...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-073378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073378 advisory. In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053299)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053299 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053269)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053269 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...
CVE-2026-67277
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
EUVD-2026-72025
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
OESA-2026-3649 gstreamer1-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
SUSE CVE-2026-54345
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header...
CVE-2026-67277: Missing Authentication for Critical Function
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...