46761 matches found
CVE-2026-86287
The Net::IP::LPM module for Perl versions before 1.12 is vulnerable to improper input validation because it accepts malformed prefix lengths. Specifically, non-numeric and non-ASCII prefix lengths are treated as 0 , while integers exceeding 31 bits are silently truncated. A single malformed mask ...
CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...
EUVD-2026-72526
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...
CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...
Use After Free
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Use After Free
Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
com.github.goldin:about-maven-plugin (>=0.2.4, <=0.2.5), com.github.goldin:assert-maven-plugin (>=0.2.4, <=0.2.5) +30 more potentially affected by CVE-2026-78254 via org.apache.ant:ant-commons-net (>=1.8.1, <=1.9.2)
org.apache.ant:ant-commons-net MAVEN version =1.8.1, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.5 and more Source cves: CVE-2026-78254 Source advisory: MEND:CVE-2026-78254...
K000163173: Linux kernel MRP vulnerability CVE-2026-53245
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector attribute events are encoded three per byte and valen tracks the number of events left to process. The...
ROS-20260907-73-0504
The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260907-73-0503
The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260907-73-0087
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
ROS-20260907-73-0085
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
OPENSUSE-SU-2026:11708-1 perl-Net-DNS-1.570.0-1.1 on GA media
These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-88201
These are all security issues fixed in the perl-Net-DNS-1.570.0-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260907-73-0502
The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...
Oracle Linux 9 : qemu-kvm (ELSA-2026-500245)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500245 advisory. - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds...
PT-2026-86915
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...
ROS-20260907-73-0083
The vulnerability of the Microsoft .NET software platform and the Microsoft Visual Studio development tools is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
CVE-2026-86287: Improper Validation of Specified Type of Input
Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...
MiracleLinux 9 : grafana-10.2.6-23.el9_8.3 (AXSA:2026-1777:26)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1777:26 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service...