399061 matches found
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...
CVE-2026-115680
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...
CVE-2026-115680
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...
EUVD-2026-109965
Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission...
CVE-2026-115680
Arm Keil MDK-Middleware versions 8.0.0-8.3.0 are susceptible to a vulnerability that may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission . The underlying cause involves an out-of-bounds read (CWE-125). While the CVSS 3.1 score is 6.5 (MEDIUM) , the technical details regardi...
USN-8955-1 nginx vulnerabilities
It was discovered that nginx incorrectly handled certain configurations using the alias directive together with rewrite rules. A remote attacker could possibly use this issue to cause nginx to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-15176 It was discovered tha...
MGASA-2026-0544 Updated perl-ExtUtils-Typemaps-Default package fixes security vulnerabilities
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. CVE-2026-107373 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. CVE-2026-107794...
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-116540
netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssltlsextticketkeycb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed...
CVE-2026-85297 Bucket Squatting in Cloud Run MCP leads to Service Account Takeover
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later...
EUVD-2026-109906
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later...
CVE-2026-85297
Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform are vulnerable to a Bucket Squatting attack. This vulnerability allows an attacker to intercept and access proprietary source code , execute arbitrary code , and exfiltrate data , potentially leading to service account takeove...
CVE-2026-85297
Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to intercept and access proprietary source code, execute arbitrary code and exfiltrate data. Users must upgrade to Cloud Run MCP version 1.11.0 or later...
CVE-2026-92171
A flaw in the Infinispan Operator for Red Hat Data Grid allows for sensitive information disclosure when cross-site (xsite) TLS is enabled. The operator launches the Gossip Router container using keystore and truststore passwords as plain-text command-line arguments (-tls_keystore_password, -tls_...
CVE-2026-92171 Infinispan-operator: infinispan operator: sensitive information disclosure due pod args store
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
EUVD-2026-109942
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-92171
A flaw was found in the Infinispan Operator for Red Hat Data Grid. When cross-site xsite TLS is enabled, the operator launches the Gossip Router container with keystore and truststore passwords passed as plain-text command-line arguments -tlskeystorepassword, -tlstruststorepassword. Container arg...
CVE-2026-115191
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface /s/ajax. A request parameter that selects the contact field to search by is not properly validated before it is used in a database query. Any authenticated Mautic user can exploit this,...
CVE-2026-115192
An SQL Injection vulnerability exists in the dashboard widget data API endpoint /api/data/type. Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard chart data. An authenticated user with API access can exploit...