CVE-2023-41474

IVANTI AVALANCHE - PATH TRAVERSAL Se ha encontrado una nueva vulnerabilidad en Ivanti Avalanche. Probada en Avalanche Server v6.3.4.153 e identificada como CVE-2023-41474. Es una vulnerabilidad limitada de path traversal sin autenticación, lo que significa que atacantes no autorizados pueden...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Rails Active Storage/libvips Lectura Arbitraria de Archivos → Robo de SECRETKEYBASE → RCE Resumen CVE-2026-66066 es una cadena de severidad crítica CVSS 9.5 de lectura arbitraria de archivos previa a la autenticación hasta ejecución remota de código en Ruby on...

CVE-2026-32945

CVE-2026-32945 Lectura fuera de límites del puntero de compresión DNS en el heap de PJSIP DoS remoto Descripción getnamelen y getname en pjlib-util/src/pjlib-util/dns.c leen un puntero de compresión DNS de 2 bytes mediante pjmemcpy&offset, p, 2 sin comprobar que ambos bytes se encuentren dentro d...

CVE-2026-84302 Discourse: Non-participant moderators can read, edit, and delete PM content through Discourse AI reviewables

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages could appear in the moderator review queue of a moderator who was not a participant in the message. Reviewable visibility filtering did n...

CVE-2026-84302 Discourse: Non-participant moderators can read, edit, and delete PM content through Discourse AI reviewables

Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, Discourse AI reviewables associated with private messages could appear in the moderator review queue of a moderator who was not a participant in the message. Reviewable visibility filtering did n...

CVE-2026-26054 SumatraPDF: Heap out-of-bounds read in MOBI header parser.

SumatraPDF is a multi-format reader for Windows. Prior to 3.6, the MobiDoc::ParseHeader function in src/MobiDoc.cpp validates a record using kMobiHeaderMinLen but DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without receiving the actual remaining buffer length. A malformed MO...

CVE-2026-26054

SumatraPDF, a multi-format reader for Windows, is vulnerable to a heap out-of-bounds read in the MobiDoc::ParseHeader function within src/MobiDoc.cpp. The issue occurs because DecodeMobiDocHeader constructs a decoder sized for kMobiHeaderLen without verifying the actual remaining buffer length, e...

EUVD-2026-86281

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-94281 Out-of-bounds read in libXi's XListInputDevices() class parsing

An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-94281

An out-of-bounds read exists in libXi 's XListInputDevices() class parsing when processing data from versions before 1.8.4 . This vulnerability could be exploited by malicious X servers to cause a crash in an attached X client. Remediation involves updating to version 1.8.4 or later. No informati...

CVE-2026-93545 Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93545

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

EUVD-2026-86278

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93545 Out-of-bounds read in libXi's XListInputDevices()

An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...

CVE-2026-93545

An out-of-bounds read exists in the libXi library within the XListInputDevices() function. This vulnerability affects versions before 1.8.4 and can be exploited by malicious X servers to cause an attached X client to crash . No specific exploit details or remediation versions beyond the affected ...

CVE-2026-93541

An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...

DEBIAN-CVE-2026-93280

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

CVE-2026-93280

In the Linux kernel, the following vulnerability has been resolved: greybus: audio: bound the topology section sizes against the fetched size gbaudiogbgettopology fetches a topology blob of a module-supplied size, and gbaudiotplgparsedata then walks it by adding the module-supplied sizedais,...

CVE-2026-93234

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and requires each name to be NUL-terminated. gudconnectoraddtvmode currently...

DEBIAN-CVE-2026-93234

In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate TV mode names before creating enum property The GUD protocol returns TV mode names as fixed-size GUDCONNECTORTVMODENAMELEN entries and requires each name to be NUL-terminated. gudconnectoraddtvmode currently...