39152 matches found
CVE-2026-19695
CVE-2026-19695 affects Wireshark via a stack-based buffer overflow in the Gammu DCT3 trace file parser, with crashes reported in Wireshark 4.6.0–4.6.7 that allow denial of service. Core details in the connected CVE entries indicate the vulnerability is tied to the DCT3 trace file parsing code, ca...
MINI-QCV7-XF5C-P7PQ
Bulletin has no description...
SUSE CVE-2026-66485
GNU cpio is vulnerable to an uncontrolled memory allocation in the makepath function at src/makepath.c. The function uses alloca to allocate stack memory based on the length of argpath, which is derived from an archive-controlled pathname during extraction. A malicious cpio archive containing a...
UBUNTU-CVE-2026-73154
GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow...
PT-2026-76032
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
PT-2026-71755
Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Recursion in the wildcard matching helper can lead to a denial of service via Excessive Allocation. The matcher used to resolve wildcard patterns against names is implement...
CVE-2026-73141
GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion...
CVE-2026-73154
GHSA-5g48-xjmf-7p4q: StationData::setData stack overflow...
CVE-2026-72636: Uncontrolled Recursion
Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...
CVE-2026-73566: Uncontrolled Resource Consumption
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter in src/list.ts uses the recursive mapHas helper to walk an archive entry path upward with path.dirname and no segment cap when tar.t... or tar.x... receives a non-empty member-selection list. A...
CVE-2026-52078
opendir stack overflow via wcscat on MAXPATH path...
RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:54660)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54660 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
UBUNTU-CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
PT-2026-71809
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)
The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....
Security Updates for Microsoft Access Products C2R (August 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...
Security Updates for Microsoft Word Products C2R (August 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...
CVE-2026-17083
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...
