CVE-2023-7340

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the...

CVE-2023-7340 Wazuh authd service (os_auth) Heap-based Buffer Overflow

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the...

CVE-2026-32984

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low impact on the availability of...

CVE-2026-32984

CVE-2026-32984 describes a heap-buffer overflow in wazuh-authd. Attackers can supply specially crafted input to cause memory corruption and malformed heap data, enabling a denial-of-service condition with low availability impact to the authentication daemon. The available connected sources confir...

Denial Of Service (DoS)

github.com/sigstore/timestamp-authority is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of untrusted input using string splitting in request parsing functions, which allows an attacker to send crafted inputs that trigger excessive memory allocations and...

SourceCodester Inventory System 跨站脚本漏洞

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the limit parameter in the viewstockavailability.php...

CVE-2026-30569

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...

OPENSUSE-SU-2026:10443-1 libsuricata8_0_4-8.0.4-1.1 on GA media

These are all security issues fixed in the libsuricata804-8.0.4-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260327-73-0007

A vulnerability in the Golang programming language is related to errors in the certificate authentication procedure. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

PT-2026-28410

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Inventory System 1.0. The vulnerability is located in the view stock availability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web script o...

CVE-2026-30569

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...

CVE-2026-30569

A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...

PT-2026-28347

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description Fleet, an open source device management software, has multiple unauthenticated HTTP endpoints that do not enforce a size limit when reading request bodies. An unauthenticated attacker can exploit this...

CVE-2026-30569

CVE-2026-30569 affects SourceCodester Sales and Inventory System 1.0. The flaw is a reflected XSS in view_stock_availability.php triggered through the limit parameter, with the app failing to sanitize input. This enables an attacker to inject arbitrary script/HTML via a crafted URL. CVSSv3.1 base...

OPENSUSE-SU-2026:10444-1 traefik-3.6.12-1.1 on GA media

These are all security issues fixed in the traefik-3.6.12-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-28461

Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input. Attackers can exploit this vulnerability to trigger a denial of service condition, resulting in low availability impact to the...

Linux net/ipv4/inet_fragment Heap Buffer Overflow DoS

The vulnerability of the inetfragqueueinsert function in the net/ipv4/inetfragment.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

FreeRDP xf_SetWindowMinMaxInfo xf_rail_get_window RCE

The vulnerabilities of the functions xfSetWindowMinMaxInfo and xfrailgetwindow in the RDP client FreeRDP are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

FreeRDP xf_clipboard_format_equal RCE

The vulnerability of the xfclipboardformatequal function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux Kernel skb_copy_ubufs Buffer Overflow

The vulnerability of the skbcopyubufs function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, relates to the issue of data being written outside of the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...