319374 matches found
SUSE SLES12: glibc / glibc-32bit / glibc-devel / glibc-devel-32bit / etc (SUSE-SU-2026:2987-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2987-1 advisory. - CVE-2026-5435: resolv: More types as unknown in nssprintrrf bsc1263656, BZ 34033 - resolv: Check for inetntop failure in nssprintrrf -...
CVE-2026-51380
Buffer Overflow vulnerability in Tenda AC10 v3 firmware V03.03.16.09 allows attackers to cause a permanent Denial of Service DoS or potentially execute remote code via the /cgi-bin/UploadCfg endpoint...
PT-2026-60221
Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description An issue exists involving improper restriction of operations within the bounds of a memory buffer. This is categorized under CWE-119, which refers to memory corruption vulnerabilities...
The vulnerability of the Open Asset Import Library’s 3D model import library (Assimp) lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code and cause system failures.
The vulnerability of the Open Asset Import Library Assimp, a library for importing 3D models, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service interruptions...
The vulnerability of the mod_proxy_html module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modproxyhtml module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Apache HTTP Server’s web server, related to the violation of the buffer limit, allows attackers to trigger a service failure.
The vulnerability of the Apache HTTP Server is related to a violation of the buffer limit. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...
Vulnerability of the WebRTC technology implementation: The networking capabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of WebRTC technology implementation: The networking of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on copying buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the mod_xml2enc module in the Apache HTTP Server allows a hacker to cause a service failure.
The vulnerability of the modxml2enc module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability in the net/core/skbuff.c component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the net/core/skbuff.c component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol allows a intruder to cause a service failure.
The vulnerability of the ipmi-oem software for intra-band and out-of-band data transmission over the IPMI FreeIPMI protocol is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Oracle Linux 10 : postgresql18 (ELSA-2026-19009)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19009 advisory. - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005:...
CVE-2026-51380
CVE-2026-51380 affects Tenda AC10 v3 with firmware V03.03.16.09. A buffer overflow in the /cgi-bin/UploadCfg endpoint could lead to a permanent DoS or remote code execution. The CVSSv3.1 score is 9.8 (CRITICAL), with network access, no privileges required, no user interaction, and high impact on ...
nginx -- multiple vulnerabilities
The nginx development team reports: Buffer overflow when using map and regex CVE-2026-42533. Severity: major. Memory disclosure when using ngxhttpslicemodule CVE-2026-60005. Severity: medium. Use-after-free when using ngxhttpssimodule CVE-2026-56434. Severity: medium...
CVE-2026-51808
Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2kdecoderimpl::invoke, invokelinebased, invokelinebasedstream, and invokelinebasedpredecoded function in source/core/interface/decoder.cpp...
CVE-2026-51807
Heap-based out-of-bounds write in j2kprecinctsubband::parsepacketheader in OpenHTJ2K versions 0.18.3 and earlier fixed in v0.18.4 caused by missing bounds validation before coding-pass lengths are written to j2kcodeblock::passlength128. A crafted JPEG 2000 codestream containing malformed PPM pack...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in OpenSSL
Summary OpenSSL for IBM i is vulnerable to out-of-bounds read when parsing a crafted DER-encoded ASN.1 structure with a 2 gigabyte primitive element or when using Cryptographic Message Services CMS password-based decryption and processing a stream-mode KEK cipher CVE-2026-34180, CVE-2026-9076,...
kernel: crypto: ccp - copy IV using skcipher ivsize
A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...
JLSEC-2026-708
Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH standard is still evolving...
JLSEC-2026-734 Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer
Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsipStoreMessage the capacity check guarding the fixed message bag MSGBAGSIZE sets an error code but fails to return, so execution falls through to an XMEMCPY that writes past the end of the buffer once the accumulated TLS 1.3...
JLSEC-2026-754 The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded...
The PKCS7 decode path ignores the caller-supplied output buffer size outputSz, allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release...