5994 matches found
CVE-2026-2006: Improper Validation of Array Index
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12,...
Vulnerability in core server (CVE-2026-2006)
PostgreSQL missing validation of multibyte character length executes arbitrary code Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the...
PT-2026-7462
Name of the Vulnerable Software and Affected Versions AMD Secure Processor ASP Boot Loader affected versions not specified Description A flaw exists in the AMD Secure Processor ASP Boot Loader, specifically within its legacy recovery mode. This issue involves inadequate sanitization of input...
The vulnerability of the smtcfb_write() function in the drivers/video/fbdev/sm712fb.c module of the Linux kernel device buffer support driver allows a attacker to cause a service failure.
The vulnerability of the smtcfbwrite function in the drivers/video/fbdev/sm712fb.c module of the Linux kernel-based device buffer support driver relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service...
ROS-20260209-73-0047
Vulnerability in golang related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
The vulnerability of the fromSetWifiGusetBasic() function in Tenda AC8 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetWifiGusetBasic function in the Tenda AC8 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the shareSpeed parameter. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c module of the Linux file system’s JFS kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the sddr55_write_data() function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sddr55writedata function in the drivers/usb/storage/sddr55.c module of the Linux operating system’s device driver framework is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-36383
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overrun can occur in the me2600 xilinx download function when loading firmware requested by request firmware. The function reads a data stream length into the file length variab...
The vulnerability of the sev_migrate_from() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to cause a service failure.
The vulnerability of the sevmigratefrom function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux operating system’s x86 kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker ...
Fedora 43 : xen (2026-844012d662)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-844012d662 advisory. x86: buffer overrun with shadow paging + tracing XSA-477, CVE-2025-58150 x86: incomplete IBPB for vCPU isolation XSA-479, CVE-2026-23553 Tenable has...
The vulnerability of the BIO_f_linebuffer() function in the OpenSSL library, which allows a hacker to cause a service failure
The vulnerability of the BIOflinebuffer function in the OpenSSL library is related to the situation where the operation’s output goes beyond the buffer’s boundaries into memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
RLSA-2023:7884 Important: postgresql:15 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-5868 postgresql: extension script @substitutions@...
ROS-20260203-73-0011
A vulnerability in the schets.c component of the Linux operating system kernel is related to an operation exceeding buffer boundaries. Exploitation of the vulnerability may allow an attacker to affect data integrity...
ROS-20260203-73-0029
A vulnerability in the hugememory.c component of the Linux kernel is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability allows an attacker to cause a denial of service...
The vulnerability of the qla2xxx_process_purls_iocb() function in the drivers/scsi/qla2xxx/qla_nvme.c driver module of the Linux SCSI device kernel driver allows a hacker to cause a service failure.
The vulnerability of the qla2xxxprocesspurlsiocb function in the drivers/scsi/qla2xxx/qlanvme.c driver for Linux SCSI device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Content Distribution Service (NomadBranch.exe) software platform for remote management of 1E Client allows a malicious individual to disclose protected information or cause service failure.
The vulnerability of the Content Distribution Service NomadBranch.exe software platform for remote management of 1E Client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause...
The vulnerability of the Content Distribution Service (NomadBranch.exe) software platform for remote management of 1E Client allows a perpetrator to trigger a service failure.
The vulnerability of the Content Distribution Service NomadBranch.exe software platform for remote management of 1E Client is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by sending...
SUSE-SU-2026:0350-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. - CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. - CVE-2022-50700:...
