260619 matches found
EUVD-2026-64691
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...
EUVD-2026-64692
A flaw has been found in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. Executing a manipulation of the argument ssid can lead to buffer overflow. The attack may be performed from remote. The exploit has been published and may be...
EUVD-2026-64674
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...
EUVD-2026-64665
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...
vuln-labs-angara
vuln-labs-angara Семь независимых Docker-стендов с уязвимыми...
ROOT-OS-DEBIAN-13-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-73072 CVE-2026-73072 in vim - Patched by Root
Root has patched CVE-2026-73072 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-73076 CVE-2026-73076 in vim - Patched by Root
Root has patched CVE-2026-73076 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-73078 CVE-2026-73078 in vim - Patched by Root
Root has patched CVE-2026-73078 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-73077 CVE-2026-73077 in vim - Patched by Root
Root has patched CVE-2026-73077 in the vim package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-58470 CVE-2026-58470 in wget - Patched by Root
Root has patched CVE-2026-58470 in the wget package for Root:Debian:11. Multiple fixed versions available...
EUVD-2026-64604
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntptimezone of the component Web Management. The manipulation of the argument timestr/ntpclientenabled results in stack-based buffer overflow. I...
openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21609-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21609-1 advisory. Changes in chromium: - Chromium 151.0.7922.169 boo1275706: CVE-2026-76034: Buffer overflow in WebGL CVE-2026-76036: Buffer overflow in Dawn...
PT-2026-79782
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote float. quote float allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded ...
Security update for chromium (important)
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21624-1 Rating: important References: bsc1275913 Cross-References: CVE-2026-76017 CVE-2026-76018 CVE-2026-76019 CVE-2026-76020 CVE-2026-76021...
CVE-2026-74670
In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. If network namespace teardown clears ipvs-enable during that phase,...
CVE-2026-74649
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...
EUVD-2026-64586
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...
CVE-2026-74649
CVE-2026-74649 affects the Linux kernel staging driver rtl8723bs . The WEP shared-key authentication handler in OnAuthClient() copies the challenge-text element into a fixed 128-byte chg_txt buffer using an attacker-controlled length (up to 255 bytes) without validation. A malicious AP can send a...
CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...