13497 matches found
PT-2026-97361
Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description A denial of service issue exists in the multi PCM plugin due to a failure to validate sparse binding indices before array access. An attacker can provide a malicious ALSA configuration file...
Foxit Reader Array resetForm Use-After-Free Vulnerability
Summary A use-after-free vulnerability exists in the way Foxit Reader handles an Array object. A specially crafted JavaScript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick...
EUVD-2026-84378
Mattermost versions 11.9.x = 11.9.1, 11.8.x = 11.8.5, 11.7.x = 11.7.10, 11.10.x = 11.10.1 fail to limit the length of the post ID array accepted by the bulk reactions endpoint which allows an authenticated user to cause excessive database load via a crafted request to POST...
CVE-2026-95666
CVE-2026-95666 affects Mattermost versions 11.9.x ≤ 11.9.1 , 11.8.x ≤ 11.8.5 , 11.7.x ≤ 11.7.10 , and 11.10.x ≤ 11.10.1 . The bulk reactions endpoint (POST /api/v4/posts/ids/reactions) fails to limit the length of the post ID array it accepts, allowing an authenticated user to cause excessive dat...
DEBIAN-CVE-2026-63272
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance values and the length of the text were read separately from the file and were not required to...
CVE-2026-63272
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance values and the length of the text were read separately from the file and were not required to...
CVE-2026-63272 Heap buffer overflow in WMF text record import
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance values and the length of the text were read separately from the file and were not required to...
CVE-2026-63272
LibreOffice is affected by a heap buffer overflow in its WMF text record import functionality. When a WMF text record carries its own character advance widths, the count of advance values and the text length are read independently from the file with no validation that they agree. During rendering...
EUVD-2026-84352
LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing a text record that carries its own character advance widths. The count of advance values and the length of the text were read separately from the file and were not required to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnupg2 (UTSA-2026-090091)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090091 advisory. GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPG...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ppp (UTSA-2023-000026)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000026 advisory. DISPUTED A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. Th...
Linux Distros Unpatched Vulnerability : CVE-2026-93451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompressArray methods that allocate output arrays by dividing uncompress...
PT-2026-96325
Name of the Vulnerable Software and Affected Versions Dancer2 versions prior to 2.2.0 Description The headers to array function fails to strip Carriage Return CR and Line Feed LF characters from response header names. While the routine removes these characters from header values, names containing...
ROS-20260922-73-0126
The vulnerability in golang-x-crypto is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: raptor2 (UTSA-2026-054035)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054035 advisory. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon. Tenable has extracted the preceding...
CVE-2026-88756
Pagekit CMS = 1.0.18 allows an unauthenticated attacker to perform SQL injection through the credentials array submitted to the public login endpoint POST /user/authenticate...
AZL-105338 CVE-2026-92382 affecting package usbredir 0.13.0-1
An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhostisopacket and allowing a usbredir peer to write past the end of the packet...
Improper Validation of Array Index
Overview Affected versions of this package are vulnerable to Improper Validation of Array Index through the ExtractMysqlComment function in comments.go and the MySQL special-comment handling in token.go. An attacker can crash the parser by supplying a malformed MySQL version comment such as an...
