CVE-2026-75348

An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occurs in CreateCommonPacketFormatStructure when it parses recognized optional socket address information items of type...

CVE-2026-101130: Buffer Over-read

The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to a heap buffer over-read. A threat actor could craft an Affinity document that, when opened by a user in Affinity, coul...

CVE-2026-75346

The EIPStackGroup OpENer software (v2.3 and master through commit 76b95cf) contains an out-of-bounds read vulnerability in the server-side CIP SetAttributeList service. A remote attacker can exploit this by sending specially crafted network requests to trigger an invalid memory read, which can le...

CVE-2026-75348

An out-of-bounds read vulnerability exists in the EtherNet/IP TCP SendRRData Common Packet Format parser within EIPStackGroup OpENer v2.3 and master up to commit 76b95cf . The root cause is located in the CreateCommonPacketFormatStructure() function, which fails to validate that the remaining CPF...

CVE-2026-107817: Out-of-bounds Read

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysqljson plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL table containing invalid JSON data cou...

PT-2026-109269

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version...

PT-2026-108724

Name of the Vulnerable Software and Affected Versions FalkorDB versions prior to 4.18.4 Description A heap-based out-of-bounds read occurs in the BufferSerializerIOv2 ReadBuffer function within src/serializers/serializer io.c. A remote attacker capable of issuing Redis replication commands can...

openSUSE 16 Security Update : libXtst (openSUSE-SU-2026:22031-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22031-1 advisory. This update for libXtst fixes the following issue: - CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser bsc1281665. Tenable has extract...

Linux Distros Unpatched Vulnerability : CVE-2026-44034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes ...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.8 (AXSA:2026-2009:32)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2009:32 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-44038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries dcmjpeg/libijg8, libijg12 and libijg16 of OFFIS DCMTK 3.7.0 allows an...

Apache Thrift Buffer Overflow DoS

The vulnerability of the Apache Thrift framework is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2026-108103: Out-of-bounds Read

Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogspfcpparsedroppeddltrafficthreshold that allows remote unauthenticated attackers to read past IE buffers via short IEs. Attackers can send PFCP Session Establishment or Modification Requests to the UPF on UDP port 8805 wi...

CVE-2026-75351: Out-of-bounds Read

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

CVE-2026-75351

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

EUVD-2026-95970

OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...

EUVD-2026-95971

OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of service...

CVE-2026-108096: Authorization Bypass Through User-Controlled Key

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted queries. This issue has been addressed in...

CVE-2026-75349: Uncontrolled Resource Consumption

EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a denial of service...

CVE-2026-96395: Out-of-bounds Read

The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...