4754 matches found
Updated opensc packages fix security vulnerabilities
These packages fix security vulnerabilities: CVE-2026-10275, A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is...
The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform allows a hacker to execute arbitrary code.
The vulnerability of the MagicYUV decoder on the FFmpeg media processing platform relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious media file...
The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW allows a perpetrator to cause a service failure.
The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW is related to the data being written beyond the buffer boundaries in memory when processing the sysAdmUser/sysAdmPass parameter. Exploitation of this vulnerability could allow a malicious actor to cause...
ROS-20260622-73-0034
The vulnerability of the Go tool pack command language is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...
ROS-20260622-73-0014
The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20260622-73-0010
The vulnerability of the Audio/Video components in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability of the formWrlsafeset() function (/goform/AdvSetWrlsafeset): This function in the httpd daemon’s microprogramming software for Tenda F453 allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the formWrlsafeset function /goform/AdvSetWrlsafeset in the httpd daemon’s microprogramming router Tenda F453 is related to the issue of operations going beyond the buffer boundaries in memory when processing the mitssidindex parameter. Exploiting this vulnerability could all...
OPENSUSE-SU-2026:21103-1 Security update for postgresql15
This update for postgresql15 fixes the following issues Security issues: - CVE-2026-6472: ensure the user has CREATE privilege on the schema specified bsc1265172. - CVE-2026-6473: integer overflows in memory-allocation calculations bsc1265173. - CVE-2026-6474: Guard against malicious time zone...
Vulnerability of the DOM component: Device Interfaces of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allow attackers to compromise the integrity and accessibility of protected information.
Vulnerability of the DOM component: Device interfaces of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are vulnerable due to operations that go beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to compromise the integrity and accessibilit...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Cryptography [CVE-2026-34073] [CVE-2026-39892]
Summary IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation and Improper Restriction of Operations within the Bounds of a Memory Buffer in Cryptography CVE-2026-34073 CVE-2026-39892. Cryptography is used in our speech runtimes. This vulnerabilitiy has been...
ROS-20260618-73-0008
The vulnerability of the ReadXBMImage function in the console-based ImageMagick graphics editor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
ROS-20260617-73-0072
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure using a specially created TIFF file...
ROS-20260617-73-0018
The vulnerability of the console-based graphic editor ImageMagick is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data or cause service interruptions...
ROS-20260617-73-0065
The vulnerability in ImageMagick 7 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability in the implementation of the Remote Desktop Protocol (RDP) on Windows operating systems allows a hacker to compromise and disclose sensitive information.
The vulnerability of the Remote Desktop Protocol RDP implementation in Windows operating systems is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
SUSE-SU-2026:22103-1 Security update for opensc
This update for opensc fixes the following issues - CVE-2026-10275: global buffer overflow during key pair generation tests due to missing input validation bsc1267246. - CVE-2026-40528: stack and heap buffer overrun in the dokeyvalue function due to missing length check allows for memory corrupti...
The vulnerability of the Kerberos protocol for Windows operating systems allows a perpetrator to trigger a service failure.
The vulnerability of the Kerberos protocol for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
ALPINE-CVE-2026-52859
Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars array with no upper bound, stopping only...
ROS-20260610-73-0015
The vulnerability in browsers Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...