397280 matches found
CVE-2026-18279
The Sony XAV-9500ES digital media player is affected by a buffer overflow in its RTSP SETUP packet handling. The root cause is the lack of proper length validation on user-supplied data before it is copied into a fixed-length buffer, allowing a network-adjacent attacker to achieve remote code exe...
CVE-2026-18279 Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...
CVE-2026-77004
A flaw has been found in Comfast CF-N1-S 2.6.0.1. This impacts the function sprintf of the file /cgi-bin/mbox-config?method=SET§ion=ptestsn. Executing a manipulation of the argument sn can lead to command injection. The attack can be launched remotely. The exploit has been published and may b...
EUVD-2026-63418
Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specifi...
CVE-2026-18271
Kenwood DNR1007XR is affected by a heap-based buffer overflow in the vCardParser class. The root cause is the lack of proper validation of a user-supplied string before it is copied into a heap-allocated buffer. A physically present attacker can exploit this flaw without authentication to achieve...
EUVD-2026-63481
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4decompresssafe...
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...
CVE-2026-55194
A flaw was found in FreeRDP. A remote attacker, specifically a malicious TS Gateway, can exploit a heap-buffer-overflow vulnerability by sending a specially crafted Remote Desktop Protocol RDP response. This occurs because the client incorrectly uses a smaller allochint value instead of the actua...
CVE-2026-76917
A flaw was found in Wireshark. A heap-based buffer overflow vulnerability exists within the Bluetooth Audio/Video Remote Control Profile AVRCP protocol dissector. This flaw can be triggered by a local user processing a specially crafted Bluetooth AVRCP packet, which requires user interaction...
CVE-2026-74297
A flaw was found in the Linux kernel's RDMA/mlx5 subsystem. Insufficient validation of a user-provided input, rqwqeshift, in the setrqsize function can lead to an integer overflow. This overflow results in an undefined shift operation, which may cause system instability or a denial of service...
CVE-2026-74292
A flaw was found in the Linux kernel's audio driver for Tegra devices, specifically within the AHUB component. This vulnerability arises because a function attempts to read data from an array using an index that has not been properly checked, potentially leading to access beyond the array's...
CVE-2026-16928
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...
EUVD-2026-63388
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a heap-based buffer overflow...
CVE-2026-16928
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 contain a heap-based buffer overflow exploitable remotely without authentication, causing denial of service (CVSS 7.5 HIGH, impact limited to availability). IBM's support page is linked as the primary reference. No exploitation or patch details are provided ...
CVE-2026-61712 vulnerabilities
Vulnerabilities for packages: kubescape, conftest-fips, kaniko, kubescape-server-fips, scorecard, cloudbeat-fips, skaffold-fips, podman-fips, podman, conftest, kubescape-server, kaniko-fips, cloudbeat, trivy-operator-fips, guac, livekit-cli...
Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
MINI-294G-8MVQ-VJJR
Bulletin has no description...
MINI-78J4-2M23-XQ2F
Bulletin has no description...