39650 matches found
CLSA-2026-1784809563 perl-DBI: Fix of 2 CVEs
CVE-2026-9698: fix stack overflow and buffer overflow in DBI.xs error handling and preparse...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
UBUNTU-CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
The CVE-2026-15722 entry concerns a pre-authentication stack buffer overflow in 389-ds-base. The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking, allowing a remote unauthentic...
CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-15722
A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...
CVE-2026-43833
A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution...
CVE-2026-43829
A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...
CVE-2026-43833
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43833
A stack-based buffer overflow vulnerability exists in the upload functionality of an unspecified software product. This flaw allows an authenticated attacker to achieve code execution by providing input that exceeds the allocated buffer size on the stack, potentially overwriting adjacent memory. ...
CVE-2026-43832
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43832
A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...
EUVD-2026-51389
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43831
A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution...
CVE-2026-43831
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-43829
A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled...
CVE-2026-43829
A stack-based buffer overflow vulnerability exists in the password functionality of the affected software. If the SafeEnhancement feature is enabled, an unauthenticated attacker can exploit this flaw to achieve code execution . No specific vendor, version, or remediation steps are provided in the...