322218 matches found
EUVD-2026-52733
Memory Corruption when handling malformed request parameters in the fingerprint TA...
CVE-2026-24080 Buffer Copy Without Checking Size of Input in Biometrics
Memory Corruption when handling malformed request parameters in the fingerprint TA...
CVE-2026-24080
The CVE-2026-24080 entry describes a memory corruption issue in the fingerprint TA when processing malformed request parameters. The vulnerability affects a component related to biometric fingerprint handling and is associated with local attack vector, requiring low privileges and provides no use...
CVE-2026-24076
Technical details for CVE-2026-24076 are not publicly available in the provided documents. No affected products, components, versions, vectors, or fixes are disclosed. Monitor for updates from the sources in the initial entry.
EUVD-2026-52729
Memory Corruption when processing registry values with incorrect types using a direct query method...
EUVD-2026-52728
Memory corruption while processing a packet with a size close to the maximum allowed value...
CVE-2026-21366
CVE-2026-21366 is described as memory corruption while processing a packet with a size close to the maximum allowed value. The initial listing and connected records corroborate a memory corruption issue, but no concrete affected product/vendor/version details are provided in the supplied document...
CVE-2026-21366 Integer Overflow or Wraparound in Data Network Stack & Connectivity
Memory corruption while processing a packet with a size close to the maximum allowed value...
Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read
The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...
Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage
Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...
X.org: xorg-x11-server: GLX contextTags Use-After-Free in CommonMakeCurrent()
A flaw was found in the X.org X11 server, specifically within the GLX OpenGL Extension to the X Window System dispatch layer. A remote attacker can exploit this vulnerability by sending a series of crafted X11 requests. This can lead to a use-after-free condition, where the server attempts to wri...
EUVD-2026-52703
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
CVE-2026-68494
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...
CVE-2026-69251
Flowise prior to version 3.1.3 is affected by a RCE in the TypeORM DataSource configuration via the additionalConfig input on specific nodes (record managers and agent memory nodes for MySQL, Postgres, SQLite, and MySQL/AgentMemory). The issue allows an authenticated user to inject arbitrary Java...
EUVD-2026-52700
The Bluetooth host ATT layer subsys/bluetooth/host/att.c associates each in-flight ATT TX buffer with its owning channel via the static txmetadatastorage array data-attchan = chan. When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system...
CVE-2026-11368
Summary of CVE-2026-11368 details: The Bluetooth host ATT layer (att.c) ties in-flight ATT TX buffers to channels via tx_meta_data_storage[]. When a buffer is freed, completion handling defers to a workqueue path (att_tx_destroy -> att_tx_destroy_work_handler -> att_on_sent_cb -> bt_att_...
EUVD-2026-52699
The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length,...
CVE-2026-18401 jackson-core: Number length constraint bypass in non-blocking (async) JSON parser leads to potential denial of service
The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. An attacker able to submit JSON to an application that uses the async parser API can supply a number token of arbitrary length,...
CVE-2026-18401
The CVE describes a vulnerability in jackson-core’s non-blocking (async) JSON parser where maxNumberLength is not enforced, unlike the synchronous parser. Root cause: the async parsing path in NonBlockingUtf8JsonParserBase does not invoke number length validation; _finishNumberIntegralPart() accu...
CVE-2026-63252
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by repeatedly sending incomplete chunks and disconnecting, potentially...