372459 matches found
IBM Storage TS4500 Library: Competing conditions issue vulnerability
The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability due to race conditions. This vulnerability may allow remote authenticated attackers to obtain unauthorized management privileges...
IBM Storage TS4500 Library Session Mechanism Vulnerability
The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session mechanisms. This vulnerability arises from sessions not being invalidated, which may allow authenticated users to impersonate another user on the system...
IBM Storage TS4500 Library Session Mechanism Vulnerability
The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a vulnerability related to session management. This vulnerability arises from the failure to invalidate sessions after they are logged out, which may allow authenticated users to impersonate other users on the system...
IBM Storage TS4500 Library Resource Management Vulnerability
The IBM Storage TS4500 Library versions 1.1.1.6 to 1.12.0.3 have a resource management vulnerability. This vulnerability arises from specially crafted SMTP requests, which consume excessive system resources and may cause denial of service for authenticated users...
UBUNTU-CVE-2026-112055
wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...
UBUNTU-CVE-2026-112056
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past...
CLSA-2026-1792327052 TuxCare security update for lodash.clonedeep (1 CVE)
TuxCare rebuilt lodash.clonedeep to address 1 CVE. Fixed in 4.5.0-tuxcare.8...
CLSA-2026-1792326317 TuxCare security update for @next/react-refresh-utils (2 CVEs)
TuxCare rebuilt @next/react-refresh-utils to address 2 CVEs. Fixed in 13.5.11-tuxcare.18...
CLSA-2026-1792326298 TuxCare security update for @next/react-refresh-utils (5 CVEs)
TuxCare rebuilt @next/react-refresh-utils to address 5 CVEs. Fixed in 16.0.6-tuxcare.13...
UBUNTU-CVE-2026-112021
snac2 before 2.93 contains a heap-based buffer overflow vulnerability in xsjsonloadlexer that allows unauthenticated remote attackers to corrupt heap memory by sending JSON strings containing a \u0000 escape. Attackers can send a single crafted application/activity+json POST to...
UBUNTU-CVE-2026-112007
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...
UBUNTU-CVE-2026-112006
OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTELEXPORTEROTLPCERTIFICATE variables are empty strings. Man-in-the-middle attackers can impersonate the collector to read or alte...
UBUNTU-CVE-2026-112009
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashe...
omnigent-client (>=0.13.0, <=0.14.0rc1), omnigent-ui-sdk (>=0.13.0, <=0.14.0rc1) potentially affected by CVE-2026-112015 via omnigent (>=0.13.0, <=0.14.0rc1)
omnigent PYPI version =0.13.0, =0.13.0, =0.13.0, =0.14.0rc1 Source cves: CVE-2026-112015 Source advisory: MEND:CVE-2026-112015...
CLSA-2022-1666277963 kernel: Fix of CVE-2022-0435
secureseq: use the 64 bits of the siphash for port offset calculation CVE-2022-1012...
CLSA-2026-1784277735 kernel: Fix of CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK...
CLSA-2026-1792309337 TuxCare security update for @babel/helper-explode-assignable-expression (2 CVEs)
TuxCare rebuilt @babel/helper-explode-assignable-expression to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792309335 TuxCare security update for @babel/helper-explode-assignable-expression (1 CVE)
TuxCare rebuilt @babel/helper-explode-assignable-expression to address 1 CVE. Fixed in 7.16.7-tuxcare.3...