180311 matches found
EUVD-2026-95525
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...
CVE-2026-98375 xen/netfront: drop RX packets with a short Ethernet header
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...
Improper Input Validation
Hazelcast is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of data supplied by a malicious client connected to the cluster, which allows an attacker to read arbitrary memory from a cluster member, crash the member, or potentially corrupt memory and execu...
Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in recent security patch releases. Vulnerability Details CVEID:CVE-2026-13757 DESCRIPTION: A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and...
CVE-2026-107634
A flaw was found in dislocker. An attacker can exploit this issue by providing a specially crafted BitLocker volume image containing inflated metadata sizes. When the application opens or mounts the image, it fails to properly validate these boundaries, triggering an out-of-bounds memory read. Th...
RLSA-2026:78952 Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
tftp security update
An update is available for tftp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...
CVE-2026-101894
A flaw was found in the @xhmikosr/decompress and decompress packages for Node.js. The default decompressinput, output API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a crafted archive containing chained symlink...
CVE-2026-7826
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-7826
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
EUVD-2026-95475
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-7826
FalkorDB versions prior to 4.18.4 are vulnerable to a heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (located in src/serializers/serializer_io.c). The root cause is a missing bounds check; while an ASSERT() exists, it is compiled out in release builds, allowing memc...
CVE-2026-7826 Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-98372
A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attack...
CVE-2026-98186
A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-SY05950 carefully crafted request body can cause a read to a random memory area which could cause the process to crash
Security vulnerability affects the apache2 package. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash...
CLEANSTART-2026-QG85837 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server
Security vulnerability affects the apache2 package. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server...
CLEANSTART-2026-NP31070 When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location
Security vulnerability affects the php package. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location...
CLEANSTART-2026-UY82629 mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them
Security vulnerability affects the php package. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them...