403436 matches found
RHEL 9 : freerdp (RHSA-2026:58710)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58710 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
The vulnerability of the console-based graphic editor ImageMagick arises from the possibility of an operation exceeding the buffer boundaries in memory, which allows a hacker to trigger a system failure.
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the internal_piz.c component of the image storage software for OpenEXR, which has a wide dynamic range of brightness levels, allows a hacker to cause a service failure.
The vulnerability of the internalpiz.c component in the image storage software for OpenEXR, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the dlm_search_rsb_tree() function in the fs/dlm/lock.c module of the Dlm subsystem in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dlmsearchrsbtree function in the fs/dlm/lock.c module of the Dlm subsystem of the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacke...
The vulnerability of the `CompositeDeepScanLine::readPixels` function in the ImfCompositeDeepScanLine component of image storage software for OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.
The vulnerability of the CompositeDeepScanLine::readPixels function in the ImfCompositeDeepScanLine component of software for storing images with a wide dynamic range of brightness, OpenEXR, is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker ...
The vulnerability of the Library component in web browsers such as Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to trigger a service failure.
The vulnerability of the Library component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
The vulnerability of the Linux operating system’s kernel, related to the operation of operations beyond the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor allows a hacker to trigger a service failure.
The vulnerability of the plug-in/common/file-psp.c component of the GIMP graphic editor is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created PSP image...
MiracleLinux 9 : freerdp-2.11.7-7.el9_8.5 (AXSA:2026-1629:26)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1629:26 advisory. FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files CVE-2026-64624 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async...
Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...
CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...
CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...
CVE-2026-78156
A heap-based buffer overflow exists in Open5GS 2.8.0 , specifically in the function hss_ogs_diam_s6a_air_cb within the file src/hss/hss-s6a-path.c, which implements the S6a Authentication-Information-Request Handler . The flaw is triggered by manipulation of the Visited-PLMN-Id argument, enabling...
CVE-2026-78183
DBD::Pg version 3.21.0 for Perl contains a heap out-of-bounds write in the quote_float function (in quote.c). The function allocates a buffer of length + 1 bytes for numeric strings, but when emitting special float literals (NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity), it writes the lit...
EUVD-2026-64665
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...
vuln-labs-angara
vuln-labs-angara Семь независимых Docker-стендов с уязвимыми...
ROOT-OS-DEBIAN-13-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
