100865 matches found
CLSA-2026-1791337488 php: Fix of 10 CVEs
CVE-2025-14181: fix heap buffer overflow in the SOAP HTTP client chunked response handling GHSA-cj93-vc83-wgqv - CVE-2026-92842: fix heap over-read in convert stream filters with NUL in line-break-chars GHSA-88hq-2827-7pg6 - CVE-2026-93682: fix out-of-bounds read on an empty Location header in...
CVE-2026-93119
A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...
CVE-2026-92520
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When BPF queue and stack pop/peek helpers fail to acquire a lock, they can return without properly initializing the output buffer. This allows a local attacker, by running a specially crafted BPF program, to observe...
CVE-2026-92518
A flaw was found in the Linux kernel's RISC-V BPF JIT compiler. When Control-Flow Integrity CFI with Clang is enabled, an error in calculating the tail call jump offset can lead to kernel stack corruption. This issue causes the system to improperly adjust the stack pointer, which can result in...
CVE-2026-90416
A flaw was found in the Linux kernel's RDMA/mlx5 component. The getparam function, used for debugging congestion parameters, incorrectly formats a 32-bit unsigned integer as a signed integer. This can lead to a stack out-of-bounds read when a large value is processed, potentially causing unexpect...
SUSE-SU-2026:4754-1 Security update for python3
This update for python3 fixes the following issues: Security issues fixed: - CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the configparser module is used bsc1269066. - CVE-2026-1703: files may be extracted outside the installation...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
EUVD-2026-104860
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43846
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution...
CVE-2026-43838
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43856
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43856
A stack-based buffer overflow vulnerability exists in the FileProcess::CheckDir function. This flaw could allow a remote authenticated attacker to achieve arbitrary code execution by providing a path longer than 1024 bytes . No specific software vendor or version is explicitly identified in the p...
EUVD-2026-104857
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes...
CVE-2026-43846
A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution...
CVE-2026-43846
CVE-2026-43846 involves a stack-based buffer overflow vulnerability located within a non-functional feature . An authenticated attacker could potentially leverage this flaw to achieve code execution . While the vulnerability is documented, the specific software product, affected versions, and rem...