openSUSE 16 Security Update : cjose (openSUSE-SU-2026:21944-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21944-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow bsc1279844. -...

OVSwrap

OVSwrap CVE-2026-64531 解説 !WARNING このPoCは、防御者、保守担当者、および明示的にテストを許可された セキュリティチームが、所有または明示的なテスト許可を得たシステム上で、 パッチ、緩和策、検出、および露出を検証することを唯一の目的として提供されます。 この資料の使用が、合法的であり、許可されたものであり、管理された状態で、 隔離されたテスト環境で実施されることを保証する責任は、すべて利用者にあります。 !WARNING このPoCは破壊的です。 成功すると、稼働中のカーネル資格情報を破壊し、 /etc/sudoers.d または /etc/sudoe...

CVE-2026-63072

🔐 CVE-2026-63072 — OpenSSL CMS ヒープバッファオーバーフロー OpenSSL の CMS キーラップ解除機能に影響を及ぼすヒープベースの領域外書き込みであるCVE-2026-63072 の技術的分析。 📌 概要 CVE-2026-63072 は、OpenSSL の CMS（Cryptographic Message Syntax） 実装における ヒープベースのバッファオーバーフロー の脆弱性です。 この脆弱性は、影響を受ける AES-WRAP-PAD キーラップ解除パスを使用して、特別に細工された CMS メッセージを処理する際にトリガーされる可能性がありま...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2026-82560

The Pod::Text component in Perl (versions before 6.1.1 ) is vulnerable to CPU and memory exhaustion when formatting a POD document. The root cause is that nested =over tags can drive the margin to equal the output width; at this point, the wrap() function's line-splitting substitution matches an ...

CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width

Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width. Each =over adds its indent to the margin, which wrap subtracts from the output width to get the space available for text. When that space...

CVE-2025-55780

CVE-2025-55780 MuPDF 1.26.4 EPUBレンダリング関数におけるヌルポインタ間接参照 CVE参照 - CVE-2025-55780 影響を受けるバージョン : 1.26.7 およびそれ以前 発見およびテスト環境 : 1.26.4 深刻度 CVSSv3 スコア : 7.5 High 修正コミット : https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=bdd5d241748807378a78a622388e0312332513c5 Bugzilla :...

CVE-2026-61720 FluidSynth: SF2 DMOD Chunk Unsigned Underflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SFMODSIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the...

EUVD-2026-83379

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SFMODSIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the...

SUSE SLES15 Security Update : cjose (SUSE-SU-2026:4251-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4251-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow...

SUSE SLES15 Security Update : cjose (SUSE-SU-2026:4253-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4253-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-90109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gredenqueue, bfifoenqueue and plugenqueue admit a packet when the current backlog plus the...

SUSE SLES12 Security Update : cjose (SUSE-SU-2026:4237-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4237-1 advisory. - CVE-2026-53938: missing encryptedkey length validation during AES Key Wrap decryption can cause heap- based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-93065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: fix counter type in iwlfwrtdumperrorlogs The loop counter 'count' was declared as u8 while numpc is u32. If firmware advertises more than 255 PC...

FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption

A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure...

CVE-2026-93065

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix counter type in iwlfwrtdumperrorlogs The loop counter 'count' was declared as u8 while numpc is u32. If firmware advertises more than 255 PC entries the counter wraps back to zero and the loop never terminates...

AZL-102167 CVE-2026-93065 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix counter type in iwlfwrtdumperrorlogs The loop counter 'count' was declared as u8 while numpc is u32. If firmware advertises more than 255 PC entries the counter wraps back to zero and the loop never terminates...

CVE-2026-90109

In the Linux kernel, the following vulnerability has been resolved: net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue gredenqueue, bfifoenqueue and plugenqueue admit a packet when the current backlog plus the packet length fits within the queue limit: sch-qstats.backlog +...