40059 matches found
CVE-2026-18020
IBM i NetServer on IBM i 7.3–7.6 is affected by CVE-2026-18020 due to an off-by-one error in bounds checking that could allow a remote attacker to cause a denial of service. The vulnerability is rooted in NetServer processing and is listed among several IBM i CVEs in the IBM Security Bulletin. Re...
CVE-2026-73562 Mongoose: Prototype pollution in the update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.10, 7.8.10, 8.24.1, and 9.7.2, passing a user-controlled update such as MyModel.updateOnefilter, req.body can exploit Mongoose update casting with a proto.x dotted path under $set...
CVE-2026-11970
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
CVE-2026-11970
CVE-2026-11970 affects Forcepoint One Endpoint on macOS (F1E) prior to v26.04.5758. A normal (non-admin) user can disable the Forcepoint One Endpoint SafariExtension, thereby bypassing DLP protection. The CVSS 4.8 vector indicates local access with low privileges and no user interaction. Exploita...
CVE-2026-11970
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
CVE-2026-11970
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
EUVD-2026-57775
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
CVE-2026-11970
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
CVE-2026-52056
skipchunk off-by-one OOB read in chunked HTTP CRLF check...
CVE-2026-18020: Out-of-bounds Read
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...
CVE-2026-11970: Improper Check for Unusual or Exceptional Conditions
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
PT-2026-71855
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...
PT-2026-71418
This vulnerability allows a normal non-admin user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758...
SUSE CVE-2026-71391
GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...
GHSA-3763-QP59-59VF nimiq-blockchain: Validity store off by one error
Impact The validity store treats a transaction with stored blocknumber = X as "in window" only when X lastbn - transactionvaliditywindowblocks strict inequality. However the protocol's Transaction::isvalidat accepts a transaction for inclusion in any block in validitystartheight - blocksperbatch,...
nimiq-blockchain: Validity store off by one error
Impact The validity store treats a transaction with stored blocknumber = X as "in window" only when X lastbn - transactionvaliditywindowblocks strict inequality. However the protocol's Transaction::isvalidat accepts a transaction for inclusion in any block in validitystartheight - blocksperbatch,...
SUSE-SU-2026:3596-1 Security update for openvpn
This update for openvpn fixes the following issues: - CVE-2026-11771: NTLM proxy auth stack off-by-one write bsc1273126. - CVE-2026-12932: memory leak using --tls-crypt-v2 bsc1273127. - CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free bsc1273128. - CVE-2026-13117: Heap...
CVE-2026-71391
A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An off-by-one error can occur when a specially crafted font file is processed due to an improper bounds check. This can cause a heap-based buffer over-read, exposing heap memory contents. Mitigation Do not load untrusted font...