38246 matches found
CVE-2026-94184
A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...
CVE-2026-65651
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
CVE-2026-65651 temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
CVE-2026-65651 temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
CVE-2026-65651
temporalio/sqlparser accepts SQL with deeply nested unary expressions and returns a correspondingly deep abstract syntax tree without enforcing a nesting limit . The library's String and Walk operations traverse that tree recursively, causing a runtime-fatal Go stack overflow that terminates the ...
EUVD-2026-83892
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
CVE-2026-65651 temporalio/sqlparser deeply nested unary expressions can cause a fatal stack overflow during AST traversal
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
PT-2026-96292
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/op aggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88408
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88408
FalkorDB (a Redis graph database module) versions v4.20.1 through v4.20.4 are affected by a stack overflow in the _GetGroup() function within /ops/op_aggregate.c. An authenticated, remote attacker can trigger a Denial of Service by sending a crafted input to the affected function. The NVD-assesse...
CVE-2026-65651: Uncontrolled Recursion
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-3874)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...
Linux Distros Unpatched Vulnerability : CVE-2026-54634
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches...
CVE-2026-88406
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88406: Stack-based Buffer Overflow
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-96290
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnion Clauses function /ast/ast validations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-96074
Name of the Vulnerable Software and Affected Versions temporalio/sqlparser affected versions not specified Temporal Server affected versions not specified Description The temporalio/sqlparser library allows SQL containing deeply nested unary expressions, resulting in a deep abstract syntax tree...
CVE-2026-88406
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88406
FalkorDB (a Redis graph database module), versions v4.20.1 through v4.20.4 , is affected by a stack overflow in the _ValidateUnion_Clauses function located in /ast/ast_validations.c. The flaw allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) by sending a crafted input...
CVE-2026-88408
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...