protobufjs: protobufjs: Denial of Service via crafted JSON descriptors

A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...

MINI-294G-8MVQ-VJJR

Bulletin has no description...

CVE-2026-19582 Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...

CVE-2026-76957

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...

GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-JR6H-R7VG-F9MC vulnerabilities

Vulnerabilities for packages: druid...

GHSA-J3RV-75WM-77RM vulnerabilities

Vulnerabilities for packages: binutils...

PT-2026-79102

A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub 44B50C of the file /cgi-bin/mbox-config?method=SET&section=ptest channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit h...

PT-2026-79224

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

PT-2026-79234

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

CVE-2026-12522

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

CVE-2026-76584

A stack-based buffer overflow exists in the alphapd component of the TRENDnet TV-IP751WIC network camera (firmware 11.03.03), specifically in the file /cgi-bin/admin/set_time.cgi. The vulnerability is triggered by manipulating the Currenttime argument and can be exploited remotely with low privil...

CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...

CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length

The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...

CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields

The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...

CVE-2026-38755 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2026-16877 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

MINI-Q56H-WR9J-PHFH

Bulletin has no description...

CVE-2026-16872

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 contain a stack-based buffer overflow exploitable over the network with no authentication, allowing arbitrary code execution (CVSS 9.8 Critical). IBM's support page is the primary reference; no exploit code or in-the-wild activity is documented. No patch detai...

CVE-2026-44254

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...