CVE-2026-30939: Improperly Controlled Modification of Object Prototype Attributes

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 8.6.13 and 9.5.1-alpha.2, an unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The...

The vulnerability of the `qed_protection_override_dump()` function in the `drivers/net/ethernet/qlogic/qed/qeddebug.c` file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qedprotectionoverridedump function in the drivers/net/ethernet/qlogic/qed/qeddebug.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow a remote attacker...

The vulnerability of the usb9pfs_rxComplete() function in the net/9p/trans_usbg.c module of the 9P protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the usb9pfsrxComplete function in the net/9p/transusbg.c module of the 9P protocol implementation in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability cou...

The vulnerability of the `meson_vpu_has_available_connectors()` function in the `drivers/gpu/drm/meson/meson_drv.c` driver for the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mesonvpuhasavailableconnectors function in the drivers/gpu/drm/meson/mesondrv.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow a remote...

The vulnerabilities of the functions `lock_pages()` and `privcmd_ioctl_dm_op()` in the `drivers/xen/privcmd.c` module of the Linux kernel device driver framework allow a attacker to cause a service failure.

The vulnerabilities of the functions lockpages and privcmdioctldmop in the drivers/xen/privcmd.c module of the Linux kernel device driver for page buffer management are related to the use of pointers. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...

The vulnerability of the hdm_disconnect() function in the drivers/most/most_usb.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the hdmdisconnect function in the drivers/most/mostusb.c component of the Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-27689: Unchecked Input for Loop Condition

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Stack-based Buffer Overflow

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in the MagnifyImage function. An attacker can cause memory corruption. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Commit - Red Hat Bugzilla Bug Credit: Ahme...

EUVD-2026-10350

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

CVE-2026-28494

CVE-2026-28494 concerns ImageMagick, where stack corruption can occur due to a stack buffer overflow in the morphology kernel parsing when user-controlled kernel strings exceed a fixed-size buffer. The issue arises because strings are copied into stack buffers via memcpy without bounds checking. ...

DEBIAN-CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

UBUNTU-CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...