203298 matches found
DEBIAN-CVE-2026-19542
Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...
DEBIAN-CVE-2026-19499
Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...
CVE-2026-76441
creationtimestamp| type| source ---|---|--- 2026-09-14 16:42:48+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117270391382884208 2026-09-14 17:40:21+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvinqftse52r 2026-09-14 18:08:56+00:00| seen|...
CVE-2026-76461
creationtimestamp| type| source ---|---|--- 2026-09-14 16:34:23+00:00| seen| https://infosec.exchange/ap/users/117202824925377048/statuses/117270349040395789 2026-09-14 16:42:48+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117270391382884208 2026-09-14 17:30:06+00:00| seen|...
CVE-2026-90786
creationtimestamp| type| source ---|---|--- 2026-09-14 14:36:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2vqxxinlsgmbn...
CVE-2026-80974
creationtimestamp| type| source ---|---|--- 2026-09-14 13:20:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvi77dv2d22l 2026-09-14 13:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117269594269637232 2026-10-01 18:00:00+00:00| seen|...
Astra Linux – Vulnerability in Samba
A flaw was discovered in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the “print command” setting via the “%J” substitution character, without escaping shell meta characters. A remote attacker could exploit this vulnerabili...
Astra Linux – Vulnerability in Wireshark
The SDP protocol dissector in Wireshark versions 4.6.0 to 4.6.4 allows for a denial of service attack...
CVE-2026-16726
creationtimestamp| type| source ---|---|--- 2026-09-14 09:18:55+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117268646152368945 2026-09-15 04:45:02+00:00| seen| https://jvn.jp/en/vu/JVNVU99837984...
CVE-2026-85192
creationtimestamp| type| source ---|---|--- 2026-09-14 08:07:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvhnpx45oh2g 2026-09-14 08:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhnv4a6ot22...
DEBIAN-CVE-2026-71198
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the importfilteringopts host restrictions. An authenticated user ca...
CVE-2026-71198
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the importfilteringopts host restrictions. An authenticated user ca...
UBUNTU-CVE-2026-25832
In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group...
UBUNTU-CVE-2026-71198
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image. Unlike the web-download import path, the location API only checks the URL scheme and does not apply the importfilteringopts host restrictions. An authenticated user ca...
DEBIAN-CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
DEBIAN-CVE-2023-24286
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter...
DEBIAN-CVE-2023-24287
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...
DEBIAN-CVE-2023-24285
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...