80829 matches found
firefox: Integer overflow in the Networking: JAR component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Networking: JAR component...
RLSA-2026:26204 Important: postgresql:18 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite...
RLSA-2026:26181 Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison CVE-2026-6478 postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write...
postgresql:15 security update
An update is available for postgres-decoderbufs, module.postgres-decoderbufs, postgresql, module.pgaudit, module.pgrepack, pgaudit, pgrepack, module.postgresql. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
PT-2026-50472
Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.5 through 0.23.1rc0 Description Integer truncation of tensor dimensions in GGUF dequantize kernels within csrc/quantization/gguf/gguf kernel.cu leads to partial tensor processing. The output tensor is allocated at full size...
Fedora 45 : krita (2026-4084e20f7e)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4084e20f7e advisory. Automatic update for krita-6.0.2.1-1.fc45. Changelog Wed Jun 17 2026 Than Ngo - 6.0.2.1-1 - Fix rhbz2481429, Update to 6.0.2.1 - Fix rhbz2476570,...
RHEL 8 : postgresql:15 (RHSA-2026:26561)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:26561 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Operating system accou...
PT-2026-71931
Name of the Vulnerable Software and Affected Versions OpenZFS affected versions not specified Description An integer overflow exists in the ZFS IOC RECV NEW ioctl within the heal receive path. The issue occurs when a 64-bit payload size is truncated to a 32-bit integer during allocation, while th...
PT-2026-53069
Name of the Vulnerable Software and Affected Versions rootio-util-linux for Root:Debian:11 affected versions not specified rootio-util-linux for Root:Debian:13 affected versions not specified Description An integer overflow or wraparound occurs in the libblkid/src/partitions/dos.c file. An intege...
PT-2026-50415
An integer overflow in the mtar next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service uncontrolled CPU consumption / infinite loop via a crafted tar archive. mtar next computes the offset to the next record as round uph.size, 512 + sizeofmtar...
PT-2026-50508
Name of the Vulnerable Software and Affected Versions RTI Connext Micro versions 4.0.0 through 4.2.0 Description An integer underflow wrap or wraparound in the Core Libraries can lead to buffer overreads. An integer underflow occurs when an arithmetic operation results in a value smaller than the...
CVE-2026-55200: Integer Overflow to Buffer Overflow
libssh2 through 1.11.1, fixed in commit 7acf3df contains an out-of-bounds write vulnerability in ssh2transportread that fails to enforce upper bounds on packetlength field. Remote attackers can send crafted SSH packets with excessively large packetlength values to corrupt heap memory and achieve...
ROS-20260617-73-0030
The vulnerability in ImageMagick is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 8 : rsync (ELSA-2026-26408)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26408 advisory. - Integer overflow in compressed-token decoding CVE-2026-43618 Tenable has extracted the preceding description block directly from the Oracle Linux...
CVE-2026-54417: Integer Overflow or Wraparound
An integer overflow in the mtarnext function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service uncontrolled CPU consumption / infinite loop via a crafted tar archive. mtarnext computes the offset to the next record as rounduph.size, 512 +...
CVE-2026-30803: Integer Underflow (Wrap or Wraparound)
Integer Underflow Wrap or Wraparound vulnerability in RTI Connext Micro Core Libraries allows Overread Buffers. This issue affects Connext Micro: from 4.0.0 before 4.3.0...
ROS-20260617-73-0029
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260617-73-0045
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260617-73-0046
The vulnerability in ImageMagick is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
Security Updates for Microsoft Office Products (June 2026) (macOS)
The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-16-2026 advisory. - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-44819, CVE-2026-44824,...