18459 matches found
PT-2026-57815
Name of the Vulnerable Software and Affected Versions gawk versions 5.4.0 and earlier Description A buffer overflow occurs in the ftype routine within the extension/readdir.c file. This flaw can lead to a program crash and potentially allow for arbitrary code execution. Recommendations Update gaw...
[SECURITY] Fedora 44 Update: log4cxx-1.7.0-2.fc44
Log4cxx is a popular logging package written in C++. One of its distinctive features is the notion of inheritance in loggers. Using a logger hierarchy it is possible to control which log statements are output at arbitrary granularity. This helps reduce the volume of logged output and minimize the...
Allocation of Resources Without Limits or Throttling
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
[SECURITY] Fedora 44 Update: perl-HTML-Gumbo-0.19-1.fc44
Gumbo is an implementation of the HTML5 parsing algorithm implemented as a pure C99 library with no outside dependencies...
CVE-2026-40454 Apache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data
Out-of-bounds Read, Improper Input Validation vulnerability in Apache IoTDB C++ client. Out-of-bounds reads in IoTDB C++ client TsBlock deserializer crash client process on malformed server data. This issue affects Apache IoTDB C++ client: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users...
[SECURITY] Fedora 44 Update: c-ares-1.34.7-1.fc44
c-ares is a C library that performs DNS requests and name resolves asynchronously. c-ares is a fork of the library named 'ares', written by Greg Hudson at MIT...
UBUNTU-CVE-2026-59858
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honor...
Fedora 44 : c-ares (2026-950a662010)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-950a662010 advisory. - update to 1.34.7 - fixes CVE-2026-33630 GHSA-6wfj-rwm7-3542 and GHSA-pjmc-gx33-gc76 and GHSA-jv8r-gqr9-68wj Tenable has extracted the preceding description...
The vulnerability of the wusb3801probe() function in the drivers/usb/typec/wusb3801.c file of the Linux operating system’s USB TypeC driver allows a hacker to cause a service failure.
The vulnerability of the wusb3801probe function in the drivers/usb/typec/wusb3801.c file of the Linux USB TypeC driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the _dpk_pas_read() function in the drivers/net/wireless/realtek/rtw89/rtw8852a_rfk.c driver for the Realtek wireless connection driver in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dpkpasread function in the drivers/net/wireless/realtek/rtw89/rtw8852arfk.c driver for the Realtek wireless adapter in the Linux operating system is related to insufficient validation of input data during division by zero. Exploiting this vulnerability could allow an...
CVE-2026-59858
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honor...
CVE-2026-59858
Vim prior to 9.2.0735 is affected by CVE-2026-59858 where the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: entry field into a :vimgrep pattern without escaping. This allows a crafted tag field to close the search pattern and append an arbitrary...
CVE-2026-59858
Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honor...
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
A flaw was found in glibc GNU C Library. This vulnerability occurs when an application uses the scanf family of functions with a %mc format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination c...
Moderate: Red Hat Security Advisory: compat-glibc security update
An update for compat-glibc is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
CVE-2026-33630
A flaw was found in c-ares. A use-after-free / double-free vulnerability exists in the query-completion handling path, where a query callback is invoked while the query is still linked in internal lookup structures. A remote attacker can exploit this via aresgetaddrinfo over TCP by sending crafte...
TencentOS Server 2: glibc (TSSA-2025:1030)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1030 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
cargo-c-0.10.23-1.1 on GA media (moderate)
cargo-c-0.10.23-1.1 on GA media Announcement ID: openSUSE-SU-2026:11210-1 Rating: moderate Cross-References: CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898 CVE-2026-42327 CVE-2026-44662 CVE-2026-45784 CVSS scores: CVE-2026-41676 SUSE : 6.5...
EUVD-2026-42275
App::Ack versions through 3.10.0 for Perl print unsanitised terminal escape sequences from filenames in several output modes. When ack prints a filename whose basename contains terminal control bytes such as ANSI escape sequences, those bytes reach the terminal unchanged. Version 3.10.0 added a...