39434 matches found
PT-2026-71809
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...
PT-2026-71755
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Recursion in the wildcard matching helper can lead to a denial of service via Excessive Allocation. The matcher used to resolve wildcard patterns against names is implement...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
EUVD-2026-57520
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
K000162891: Jettison vulnerability CVE-2022-45693
Security Advisory Description Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string. CVE-2022-45693 Impact There is no impact; F5 products are not affected by this...
CVE-2026-71407
CVE-2026-71407 is a stack-based buffer overflow (CWE-121) in the WAD daemon of Fortinet FortiOS 7.6.1 through 7.6.6 . An unauthenticated attacker who can bypass stack protection and ASLR may execute arbitrary code or commands via crafted sockets, but only if the explicit proxy is configured with ...
perl-DBI:1.641 security update
perl-DBI 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 Resolves: RHEL-193298 1.641-5 - Fix stack overflow and buffer overflow in DBI.x...
Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...
ROS-20260812-73-0023
The vulnerability in Wireshark is related to overflowing of buffers in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
PT-2026-71269
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer ...
DEBIAN-CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
CVE-2026-66485
A flaw was found in GNU cpio. This vulnerability involves uncontrolled memory allocation when processing specially crafted cpio archives. A remote attacker could exploit this by providing a malicious archive, leading to a stack overflow and causing the cpio process to crash. This results in a...
CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
CVE-2026-29035 CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...
CVE-2026-29035
CVE-2026-29035 affects CivetWeb (commit 4a4f0c95) and describes a heap and stack buffer overflow in read_websocket() when both USE_ZLIB and MG_EXPERIMENTAL_INTERFACES are defined. An unauthenticated remote attacker can exploit this via compressed WebSocket frames negotiated with permessage-deflat...
CVE-2026-29035
CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate...