394901 matches found
ALSA-2026:75575 Important: gimp security update
The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...
PT-2026-106241
Name of the Vulnerable Software and Affected Versions AMD Zynq™ UltraScale+ MPSoC affected versions not specified AMD RFSoC affected versions not specified Description Insufficient boundary validation in the USB boot mode implementation allows unbounded Device Firmware Upgrade DFU download reques...
CVE-2026-105285: Stack-based Buffer Overflow
A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...
The vulnerability of the sub_415E80() function in TOTOLINK N150RT router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the sub415E80 function in TOTOLINK N150RT router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
RHEL 9 : gimp (RHSA-2026:75575)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75575 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...
MiracleLinux 9 : gawk-5.1.0-6.el9_8.1 (AXSA:2026-1965:02)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1965:02 advisory. gawk: gawk: Memory corruption via integer overflow CVE-2026-40468 gawk: Gawk: Buffer overflow in ftype routine may lead to code execution or denial ...
AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static (ALMALINUX9.2:CLSA-2026:1791196479)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791196479 advisory. - libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expatrealloc function on 32-bit platforms when computing...
RHEL 8 : librabbitmq (RHSA-2026:75582)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75582 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...
MiracleLinux 8 : gvfs-1.36.2-22.el8_10 (AXSA:2026-1967:05)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1967:05 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 Tenable has extracted the preceding description block directly from the MiracleLinux...
CVE-2026-20540: Buffer Over-read
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58835: Heap-based Buffer Overflow
In cfg2prop of btifstorage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-106159
Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow in the cfg2prop function within btif storage.cc can lead to an out-of-bounds write. This issue allows for remote code execution without requiring additional...
The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.
The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
ALSA-2026:75582 Important: librabbitmq security update
The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...
CVE-2026-91135
Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transform copies the compressed frame into the write buffer without making sure it fits. Data that does not compress, such as...
CVE-2026-93925
Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-83632
Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
The vulnerability of the sgpd_del_entry() function in the src/isomedia/box_code_base.c file of the MP4Box component of the GPAC multimedia platform allows a hacker to trigger a service failure.
The vulnerability of the sgpddelentry function in the src/isomedia/boxcodebase.c file of the MP4Box component of the GPAC multimedia platform is related to the occurrence of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a...
CVE-2026-66837
Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
