31390 matches found
PT-2026-61502
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sysfs component where the internal create group function incorrectly calls kernfs removekn on a group directory when create files fails for example, due to -ENOMEM...
PT-2026-61478
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the icssm prueth probe function within the net: ti: icssm-prueth component. The issue arises when of property read u32 fails, causing the function to return witho...
PT-2026-61204
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap overrun occurs in the iscsi encode text output function when concatenating records into the rsp buf buffer. The function uses sprintf to append key-value pairs without verifying t...
EUVD-2024-55673
SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...
CVE-2026-9588 Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
A stored cross-site scripting XSS vulnerability exists in Sangoma Switchvox SMB Edition 8.3 104997 within the voicemail notification template functionality. The submitmodifyvoicemailtemplate endpoint fails to properly sanitize HTML content supplied by authenticated users, allowing malicious...
EUVD-2026-45159
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to inflate the fee-payer's gas cost per payment by a large multiplier, degrading the sponsor's operating margin. When the mpp Elixir library is configured as fee payer feepayer: true,...
CVE-2026-8075 Posting a malicious markdown image crashes the Mattermost Desktop App
Mattermost Desktop App versions =6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermo...
CVE-2026-9602
Mattermost Desktop App versions =6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00...
Oracle Linux 10 : coreutils (ELSA-2026-33124)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33124 advisory. 9.5-8.0.1 - clean up empty file if cp is failed Orabug 15973168 9.5-8 - CVE-2025-5278 - Fix Heap Buffer Under-Read in sort via Key Specification RHEL-180649...
The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.
The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the audio_format_compatible() function in the RDP client FreeRDP allows a attacker to trigger a service failure or execute arbitrary code.
The vulnerability of the audioformatcompatible function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...
The vulnerability of the ASHLAR encoder in the console-based image editing tool ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the SIXEL decoder in the console-based image editing software ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the decoder in the console-based ImageMagick graphics editor allows a hacker to trigger a service failure.
The vulnerability of the MAT decoder in the console-based ImageMagick graphics editor is related to reading data outside of the permitted range in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Vulnerability of the libusb_udev_select_interface() function in the RDP client FreeRDP, allowing a hacker to cause a service failure or execute arbitrary code
The vulnerability of the libusbudevselectinterface function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code...
The vulnerability of the freerdp_certificate_data_hash_() function in the RDP client FreeRDP allows a hacker to trigger a service failure.
The vulnerability of the freerdpcertificatedatahash function in the RDP client FreeRDP is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the urb_select_interface() function in the RDP client FreeRDP allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the urbselectinterface function in the RDP client FreeRDP relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code...
The vulnerability of the MSL encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.
The vulnerability of the MSL encoder in the console-based image editing tool ImageMagick relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the audin_server_recv_formats() function in the RDP client FreeRDP allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the audinserverrecvformats function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick allows a hacker to induce a service failure.
The vulnerability of the BilateralBlurImage file in the console-based image editing tool ImageMagick relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...