792436 matches found
CVE-2026-115295 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read access to connectors in one Kibana space can retrieve connector execution log information fro...
GHSA-H26J-4VP7-X9W2 Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
Summary Metalama uses a local named-pipe channel to communicate between its Visual Studio processes — the Visual Studio UI process devenv, the out-of-process Roslyn code-analysis process, and the CodeLens process. This channel deserialized messages from the pipe without restricting which CLR type...
EUVD-2026-114449
Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution...
Metalama: Unsafe deserialization over Metalama's Visual Studio inter-process named pipe enables local code execution
Summary Metalama uses a local named-pipe channel to communicate between its Visual Studio processes — the Visual Studio UI process devenv, the out-of-process Roslyn code-analysis process, and the CodeLens process. This channel deserialized messages from the pipe without restricting which CLR type...
Elastic Maps Server 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-238)
Out-of-bounds Write in Elastic Maps Server Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder used by the Node.js runtime, a dependency of Elastic Maps Server Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to corrupt memory and...
Elastic Agent 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-234)
Out-of-bounds Write in Elastic Agent Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder of Node.js, a dependency of Elastic Agent Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to cause a crash, disclose process memory, or...
Heartbeat 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-233)
Out-of-bounds Write in Heartbeat Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder of Node.js, a dependency of Heartbeat Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to cause a crash, disclose process memory, or potentially...
Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-232)
Out-of-bounds Write in Kibana Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder of Node.js, a dependency of Kibana Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to corrupt memory and potentially execute code in the Kibana server...
Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-206)
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with read...
CVE-2026-121602 Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN
Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in msjoin and mssjoin...
CVE-2026-121603 Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler
Solanum before commit 2ea1382 contains a buffer overflow vulnerability in mskill that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte...
CVE-2026-121603 Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler
Solanum before commit 2ea1382 contains a buffer overflow vulnerability in mskill that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte...
EUVD-2026-116037
Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in msjoin and mssjoin...
EUVD-2026-116038
Solanum before commit 2ea1382 contains a buffer overflow vulnerability in mskill that allows malicious linked servers to corrupt memory by sending an overlong kill reason. Attackers controlling a rogue or compromised peer server can send a reason exceeding KILLLEN that overflows a static 512-byte...
CVE-2026-121602 Solanum before commit 2ce64de Heap Buffer Overflow via JOIN and SJOIN
Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server to corrupt memory by sending overlong channel names in JOIN or SJOIN messages. Attackers controlling a peer server can trigger strcpy and sprintf overflows in msjoin and mssjoin...
CVE-2026-121603
The Solanum IRC daemon (versions prior to commit 2ea1382 ) is vulnerable to a buffer overflow in the ms_kill() function. This flaw occurs when a linked server sends a kill reason exceeding the KILLLEN limit, causing an overflow of a static 512-byte buffer. A malicious or compromised peer server c...
CVE-2026-121588
The TeXlyre application (versions 0.11.0 before 0.13.5 ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists when the application processes LSP or typesetter recipe icons . An attacker can provide a malicious icon containing an HTML event handler , which executes s...
kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period
A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition occurs during concurrent processing of retransmitted Transmission Control Protocol TCP connection requests or socket migrations, allowing socket options to be freed while still in use. A remote attacker could explo...
CVE-2026-28335 SolarWinds Dameware Buffer Overflow Vulnerability
SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required...