261863 matches found
MiracleLinux 9 : nodejs:24 (AXSA:2026-1641:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1641:01 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash vi...
ROS-20260824-73-0004
The vulnerability of the parseargs function in Sudo system administration software is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
gstreamer1-plugins-good security update
1.16.1-7.7 - Fix CVE-2026-18296: heap buffer overflow in qtmoovrecover Resolves: RHEL-246382 1.16.1-7.6 - Fix CVE-2026-18298: heap buffer overflow in GdkPixbuf image decoder Resolves: RHEL-246561 1.16.1-7.5 - Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay Resolves: RHEL-246618 1.16.1-7.4 - Fix...
Konami's Metal Gear Online 3 contains a heap-based buffer overflow
Overview Konami's Metal Gear Online 3 video game contains a heap-based buffer overflow that can be triggered by an input‑validation vulnerability that allows match hosts to remotely execute arbitrary code on lobby members' machines through specially crafted data. Description Metal Gear Online 3 i...
Important: sqlite security update
SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...
PT-2026-80931
A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...
CVE-2026-52492
libtiff 's rgb2ycbcr utility contains an integer overflow in the cvtRaster() function when computing strip buffer sizes. This leads to an undersized heap allocation and a subsequent heap-based buffer overflow triggered during YCbCr conversion of a crafted TIFF image. A fix is referenced in the pr...
EUVD-2026-65145
An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...
PT-2026-80850
Name of the Vulnerable Software and Affected Versions RustDesk affected versions not specified Description Windows clipboard redirection fails to perform an upper bound check when copying a peer-supplied length into a fixed-size caller buffer. When an OLE paste consumer, such as explorer.exe, cal...
PT-2026-80907
Name of the Vulnerable Software and Affected Versions Netis NC63 versions prior to V3.0.0.3327 Description A stack-based buffer overflow exists in the login handler of the '/bin/netis.cgi' endpoint. The issue occurs because the custom Base64 decoder fails to validate the output length against a...
ALSA-2026:59179 Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...
CVE-2026-78156 Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss_ogs_diam_s6a_air_cb heap-based overflow
A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...
CVE-2026-78156
A heap-based buffer overflow exists in Open5GS 2.8.0 , specifically in the function hss_ogs_diam_s6a_air_cb within the file src/hss/hss-s6a-path.c, which implements the S6a Authentication-Information-Request Handler . The flaw is triggered by manipulation of the Visited-PLMN-Id argument, enabling...
EUVD-2026-64665
DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quotefloat. quotefloat allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by...
w48crash
WebMod Stack-Pufferüberlauf CVE-2007-1260 von cybermind Kevin Masterson [email protected] WebMod-Seite archiviert: https://web.archive.org/web/20080517044559/http://djeyl.net/w.php Verwundbare Versionen: 0.48, sowohl Win32 als auch Linux. Frühere Versionen könnten verwundbar sein. Dies sollt...
DC30_Workshop
DEF CON 30 Workshop Mainframe-Container Die Skripte hier werden verwendet, um den virtuellen MVS-3.8j-Großrechner für den DEFCON-30-Workshop zu erstellen. Vielen Dank, dass Sie sich den DEFCON-30-Workshop zu Mainframe-Buffer-Overflows ansehen. Docker verwenden Dieser Docker-Container enthält alle...
vuln-labs-angara
vuln-labs-angara Семь независимых Docker-стендов с уязвимыми...
ROOT-OS-DEBIAN-13-CVE-2026-34191 CVE-2026-34191 in apr-util - Patched by Root
Root has patched CVE-2026-34191 in the apr-util package for Root:Debian:13. Multiple fixed versions available...