180365 matches found
RLSA-2026:78952 Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
tftp security update
An update is available for tftp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...
CVE-2026-101894
A flaw was found in the @xhmikosr/decompress and decompress packages for Node.js. The default decompressinput, output API relies on lexical containment checks that do not account for the kernel following a planted symlink chain. An attacker can supply a crafted archive containing chained symlink...
CVE-2026-7826
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-7826
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
EUVD-2026-95475
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-7826
FalkorDB versions prior to 4.18.4 are vulnerable to a heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (located in src/serializers/serializer_io.c). The root cause is a missing bounds check; while an ASSERT() exists, it is compiled out in release builds, allowing memc...
CVE-2026-7826 Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB
A heap-based out-of-bounds read in the BufferSerializerIOv2ReadBuffer function src/serializers/serializerio.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a denial of service or...
CVE-2026-98372
A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attack...
CVE-2026-98186
A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-SY05950 carefully crafted request body can cause a read to a random memory area which could cause the process to crash
Security vulnerability affects the apache2 package. A carefully crafted request body can cause a read to a random memory area which could cause the process to crash...
CLEANSTART-2026-QG85837 Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server
Security vulnerability affects the apache2 package. Out-of-bounds Read vulnerability in modmacro of Apache HTTP Server...
CLEANSTART-2026-NP31070 When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location
Security vulnerability affects the php package. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location...
CLEANSTART-2026-UY82629 mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them
Security vulnerability affects the php package. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them...
CLEANSTART-2026-IE69074 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...
CLEANSTART-2026-MZ65178 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
CVE-2025-47914 affects multiple packages. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. See references for individual vulnerability details...
EUVD-2025-211053
Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...
SUSE CVE-2026-19029
A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...
curl: CVE-2026-107928: info leak uploading over WebSockets with GnuTLS
Summary: When curl is built with GnuTLS, a malicious WebSocket server can make curl -T wss://... send memory past curl's WebSocket send buffer. This is due to an out of bounds read in gtlssend, which doesn't handle if gnutlsrecordsend returns a number of bytes sent greater than the number of byte...