855630 matches found
UBUNTU-CVE-2026-115774
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEARCH command after the client enters the selected mailbox stat...
PT-2026-123395
Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote unauthenticated clients to alter hostnames via JNI NewStringUTF decoding. Attackers can send overlong encodings like 0xC0 0x80 in the ClientHello server name to confuse SNI-based certificat...
UBUNTU-CVE-2026-98919
In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjustidledly against divide-by-zero and overflow adjustidledly has several corner-case issues flagged during review: 1. If xegtclockinit failed to recognise the crystal clock, gt-info.timestampbase is 0, which mak...
UBUNTU-CVE-2026-98888
In the Linux kernel, the following vulnerability has been resolved: arm64: kprobes: Allow reentering kprobes while single-stepping A kprobe can be hit while another kprobe is in KPROBEHITSS state. This can happen when tracing or perf code runs from the debug exception path while the first kprobe ...
PT-2026-123399
OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opj dwt encode and deinterleave v in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...
CVE-2026-107080
The OpenJPEG library (versions 2.4.0 through 2.5.4 and git master through commit 8314119b ) is vulnerable to an out-of-bounds read and write in the opj_dwt_encode_and_deinterleave_v() function located in src/lib/openjp2/dwt.c. An attacker can exploit this flaw to cause a denial of service . No sp...
UBUNTU-CVE-2026-98934
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: use skbgethashnet in seg6makeflowlabel Since commit d58e468b1112 "flowdissector: implements flow dissector BPF hook" skbflowdissect needs a net pointer, either from skb-dev, skb-sk, or since commit 3cbf4ffba5ee "net:...
CVE-2026-107080
OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in opjdwtencodeanddeinterleavev in src/lib/openjp2/dwt.c. This allows an attacker to cause a denial of service...
PT-2026-125098
libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...
EUVD-2026-110095
libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...
PT-2026-123293
Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server memory via DATA frames sent past the advertised receive window. The attacker requests a response larger than the 65,535-byt...
PT-2026-123294
Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an unauthenticated remote attacker to exhaust server CPU via small SETTINGS or connection-level WINDOW UPDATE frames. The attacker opens thousands of streams whose responses block on the...
PT-2026-123319
Interpretation Conflict vulnerability in hackney url in benoitc hackney allows Server Side Request Forgery via a percent-encoded bracketed IPv6 literal or an IP literal with a trailing dot. A host such as %5B%3A%3Affff%3A127%2E0%2E0%2E1%5D decoding to ::ffff:127.0.0.1 or 127.0.0.1. is not an IP...
PT-2026-123255
A vulnerability has been found in PGYER codefever up to 0c35e60f006f9d558cc33a159baf110659351990. Affected is the function detail of the file application/controllers/doc.php of the component URI Sanitizer. The manipulation of the argument uri string leads to path traversal. The attack may be...
CVE-2026-115327
libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxmlenvnetconfrpc in src/parserxml.c when parsing NETCONF rpc action envelopes. Peers with a NETCONF session can send an action element containing non-whitespace text via lydparseop to crash servers like netopeer2 or...
PT-2026-123466
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...
ROS-20261026-73-0085
The vulnerability in openssh is related to errors in the management of registration data. Exploitation of this vulnerability can be carried out remotely...
CVE-2026-104597
libosmocore through 1.14.1 contains an out-of-bounds read in iuuprxinitialization in src/gsm/iuup.c. This allows a remote attacker to obtain sensitive information...