769633 matches found
CVE-2026-76289 Denial of Service (DoS) through the REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transfer REST API endpoint for lookup table...
CVE-2026-76289 Denial of Service (DoS) through the REST API in Splunk Enterprise
In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unavailable to other users by sending a request to the Representational State Transfer REST API endpoint for lookup table...
CVE-2026-76289
Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16 are vulnerable to a Denial of Service (DoS) attack. A user without "admin" or "power" roles can make the instance unavailable by sending a request to the REST API endpoint for lookup table files. The root cause is that the endpo...
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...
UBUNTU-CVE-2026-114501
Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im-blocks0.ptr even when PILLOWALIGNMENT makes alignedlinesize include row padding or an aligned offset before the first row. The resulting Arrow buffer...
CVE-2026-98658
A flaw was found in the Linux kernel's aw96103 proximity sensor driver. This vulnerability can lead to a Denial of Service DoS or kernel information disclosure via an out-of-bounds memory read. The issue occurs because the driver's firmware parser does not properly validate the data length...
CVE-2026-96642
A flaw was found in Pillow. When an application processes tar archives using the TarIO component, an archive containing an invalid negative member size causes the parser to enter an infinite loop by repeatedly reading the same header. An attacker could exploit this by providing a specially crafte...
CVE-2026-96641
A flaw was found in Pillow. When processing text dimensions with certain fonts, negative character spacing values are not properly validated during text-width calculation, causing an integer overflow. A remote attacker could exploit this vulnerability by providing crafted text or font data to an...
CVE-2026-96778
A flaw was found in Pillow. A remote attacker could exploit a heap buffer overflow vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS. This issue occurs when an application re-encodes an untrusted image into JPEG format while preserving specially crafted color...
CVE-2026-96644
A flaw was found in Pillow. When processing Windows Metafile WMF or Enhanced Metafile EMF images on Windows systems, the image parser improperly handles dimension values, allocating an undersized buffer while reading full dimensions. A remote attacker could exploit this vulnerability by enticing ...
CVE-2026-96643
A flaw was found in Pillow. When processing a specially crafted image with repeated Exchangeable Image File Format EXIF metadata headers, the library repeatedly copies and parses the data. A remote attacker could exploit this vulnerability by providing a malicious image file to an application tha...
brotli: Out-of-Bounds Write in Google Brotli Decoder
A flaw was found in the Google Brotli decoder. An out-of-bounds write in the block-type switch handling in c/dec/decode.c can be triggered by a crafted Brotli-compressed stream. When an application decompresses untrusted Brotli data, this can lead to memory disclosure, denial of service, or...
CVE-2026-114508
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...
CVE-2026-114508 Laravel relationship inclusion can trigger unauthorized data destruction
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...
CVE-2026-114508 Laravel relationship inclusion can trigger unauthorized data destruction
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...
CVE-2026-114508 Laravel relationship inclusion can trigger unauthorized data destruction
Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no write permission can empty related-tabl...
CVE-2026-114508
The Laravel web application framework is vulnerable to unauthorized data destruction in versions 12.45.0 through 12.68.0 and 13.27.0 . The root cause is that crafted relationship inclusions on a read-only endpoint can trigger destructive database operations on related tables instead of retrieving...
USN-8890-2: libsoup vulnerabilities
USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of...
USN-8890-2 libsoup3 vulnerabilities
USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of...
CVE-2026-98657
A flaw was found in the Linux kernel's PulsedLight LIDAR sensor driver. When device initialization fails during power management setup, the driver fails to properly unregister the device before releasing its allocated memory. This leaves active system interfaces pointing to released memory,...