404776 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-58081
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size of the caller-supplied output buffer before writing converted...
MiracleLinux 9 : 389-ds-base-2.8.0-9.el9_8 (AXSA:2026-1635:06)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1635:06 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...
RHEL 10 : freerdp (RHSA-2026:58711)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58711 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
RHEL 9 : freerdp (RHSA-2026:58712)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58712 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
RHEL 9 : freerdp (RHSA-2026:58713)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:58713 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
PT-2026-81075
BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability...
ROS-20260824-73-0004
The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
python-pyasn1 security update
0.6.2-1.1 - Fix CVE-2026-59886: prevent overflow in Real.float when converting ASN.1 Real values with large exponents Resolves: RHEL-217904...
PT-2026-79806
Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...
The vulnerability of the plug-in/file-ico/ico-load.c component of the GIMP graphic editor allows a hacker to cause a service failure.
The vulnerability of the plug-in/file-ico/ico-load.c component in the GIMP graphic editor is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created ICO file...
The vulnerability of the Close() function in the Go programming language, which allows a hacker to trigger a service failure
The vulnerability of the Close function in the Go programming language is related to the operation of writing data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the internal_b44.c component of the image storage software for OpenEXR, which has a wide dynamic range of brightness levels, allows a hacker to cause a service failure.
The vulnerability of the internalb44.c component of the OpenEXR image storage software, which handles images with a wide dynamic range of brightness, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of Firefox and Firefox ESR web browsers, as well as the Thunderbird email client, related to writing beyond the buffer limit, allowing attackers to trigger a service failure.
The vulnerabilities in web browsers Firefox and Firefox ESR, as well as the Thunderbird email client, are related to buffer overflow attacks. Exploiting these vulnerabilities can allow an attacker to cause service interruptions remotely...
The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program allows a hacker to cause a service failure.
The vulnerability of the draw-unpack.c component in the MuPDf PDF viewer program is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the hw/audio/virtio-snd.c component of the QEMU hardware emulation software allows a hacker to trigger a system failure.
The vulnerability of the hw/audio/virtio-snd.c component of the QEMU hardware emulation software is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a system failure...
MiracleLinux 9 : haproxy-2.8.14-3.el9_8.2 (AXSA:2026-1627:03)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1627:03 advisory. haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 haproxy: HAProxy: Response smuggling due to integer overflow i...
CVE-2026-56135
CVE-2026-56135 is a heap-based buffer overflow in the build_inherited_id() function of libntfs-3g/security.c, affecting NTFS-3G through 2026.2.25 . An attacker can trigger the overflow by crafting a malicious NTFS image and creating a file within a crafted directory, leading to heap memory corrup...
MiracleLinux 9 : nodejs:24 (AXSA:2026-1641:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1641:01 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...
Konami's Metal Gear Online 3 contains a heap-based buffer overflow
Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitrary code on lobby members' machines through specially crafted data. Description Metal Gear Online 3 i...