11473 matches found
CVE-2026-62243
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...
PT-2026-79625
In the Linux kernel, the following vulnerability has been resolved: net/sched: act gact, act police: range check the fallback control action tcf action check ctrlact range checks the primary control action: if !opcode ret = action TC ACT VALUE MAX ? -EINVAL : 0; TC ACT VALUE MAX is TC ACT TRAP, s...
CVE-2026-63308
A flaw was found in Helm. A remote attacker can exploit a denial of service vulnerability by including zero-length byte slices, such as empty files, within Helm chart files. This can trigger an index out of range panic in the Files.Lines template helper, leading to deterministic render failures...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102089)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102089 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtmultiport: validate range encoding in checkentry portsmatchv1 treats any non-zero...
cloud_ip_ranges
Intervalli IP del Cloud Descrizione La maggior parte dei provider cloud pubblica elenchi aggiornati dei propri intervalli di indirizzi IP. Questo strumento identifica se un IP appartiene agli intervalli di un provider recuperando ed analizzando gli elenchi più recenti. Supporta: AWS fonte Azure...
CVE-2026-15742 affecting package postgresql for versions less than 16.15-1
CVE-2026-15742 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
EUVD-2026-63225
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-77014 Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-77014
libsoup (GNOME's HTTP library) contains an integer truncation flaw in the sort_ranges() comparator within soup-message-headers.c. The function truncates a 64-bit subtraction result to a 32-bit int, which flips the sign when range offsets differ by more than INT_MAX. This causes silent omission of...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
kernel: drm/amdgpu: fix amdgpu_hmm_range_get_pages
A flaw was found in the Linux kernel, specifically within the drm/amdgpu component. This vulnerability arises from incorrect handling of a notifier sequence in the amdgpuhmmrangegetpages function, where the sequence can be read more than once. This can lead to the system processing invalid memory...
CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12
CVE-2026-73500 affecting package cert-manager for versions less than 1.12.15-12. A patched version of the package is available...
Linux Distros Unpatched Vulnerability : CVE-2026-77014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
PT-2026-78864
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software...
CVE-2026-73502
kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 unt...
GO-2026-6114 Watch API authorization bypass in go.etcd.io/etcd/server/v3
In go.etcd.io/etcd/server/v3 before 3.5.33, 3.6.14, and 3.7.1, an authenticated user with READ permission on a single key can bypass RBAC restrictions by initiating an open-ended range watch using clientv3.WithFromKey. The Watch RPC handler normalized open-ended range ends prior to authorization...