39429 matches found
unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option
A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...
GHSA-GC95-3VW8-VG43 docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Summary docx4j's PropertyResolver and several adjacent helpers recursively walk the OpenXML style inheritance chain w:basedOn without cycle detection. A WordprocessingML document containing a cyclic style chain for example, Style A based on B and Style B based on A causes unbounded recursion and ...
docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
Summary docx4j's PropertyResolver and several adjacent helpers recursively walk the OpenXML style inheritance chain w:basedOn without cycle detection. A WordprocessingML document containing a cyclic style chain for example, Style A based on B and Style B based on A causes unbounded recursion and ...
unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option
A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
MINI-5RP5-MJ84-GFR7
Bulletin has no description...
CVE-2026-54758 Notepad++: Stack Buffer Overflow in expandNppEnvironmentStrs
Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a Notepad++ variable name between $ and into the fixed-size wchart strMAXPATH stack buffer without bounding the m loop...
MINI-F7P2-FF8M-3HW4
Bulletin has no description...
MINI-M4F4-Q4V9-V5R8
Bulletin has no description...
ANT-2026-2NNMB24E · openssh · stack-overflow
stack-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-2NNMB24E: stack-overflow in openssh OpenSSH's matchpattern in...
MINI-FXJ3-W3J2-X7J3
Bulletin has no description...
CVE-2026-45698
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...
UBUNTU-CVE-2026-59903
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse...
ANT-2026-CAH7XGSQ · lua · stack-overflow
stack-overflow low Severity Claude low · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Anvil Security. ANT-2026-CAH7XGSQ: stack-overflow C stack exhaustion via unbounded...
Exploit for CVE-2026-40345
deepmerge-ts mergeleft.self, right.self - mergeleft.sel...
MINI-GFXM-Q3V3-339V
Bulletin has no description...
MINI-W7VW-CM5M-8QC6
Bulletin has no description...
MINI-P7FQ-X97F-H6XP
Bulletin has no description...