260601 matches found
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. A local user could exploit a boundary error in the debug address watch v2 functionality by providing a specially crafted watchid. This could lead to a buffer overflow, potentially allowing memory access outside of...
kernel: drm/i915/gem: Fix phys BO pread/pwrite with offset
A flaw was found in the Linux kernel's drm/i915/gem component. This vulnerability occurs because the sgpage function incorrectly scales pread/pwrite operations for physical Buffer Objects BO when a non-zero offset is used. This can lead to incorrect memory access, potentially allowing an attacker...
kernel: drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
A flaw was found in the Linux kernel's AMD KFD Kernel Fusion Driver component. This buffer overflow vulnerability occurs due to incorrect memory buffer handling during CRIU Checkpoint/Restore in User-space operations on SDMA System Direct Memory Access queues. A local attacker can exploit this fl...
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582
In binutils 2.46.1 and earlier, the rsrc_print_name function suffers a stack buffer overflow from an untrusted PE file, enabling arbitrary code execution with HIGH severity (CVSS 7.8). No exploit code or in-the-wild activity is reported; upgrade binutils beyond 2.46.1 to remediate.
EUVD-2026-63197
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write. Mitigation Do not open unknown files and/or files from an untrusted source using binutils...
kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...
CVE-2026-76347
creationtimestamp| type| source ---|---|--- 2026-08-20 04:47:02+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...
kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...
GO-2026-6195 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6183 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6190 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6197 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...