PT-2026-51732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the rds ib send cqe handler function when handling masked atomic completions. The rds ib xmit atomic function programs a masked atomic opcode either ...

UBUNTU-CVE-2026-34183

Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATHCHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnormal termination of the application acting as a QU...

PT-2026-48344

Name of the Vulnerable Software and Affected Versions Pheditor versions 2.0.1 through 2.0.3 Description An OS Command Injection issue exists in the terminal action handler of the pheditor.php file. Authenticated users can execute arbitrary operating system commands with web server privileges by...

PT-2026-47711

Name of the Vulnerable Software and Affected Versions The Events Calendar for GeoDirectory plugin for WordPress versions prior to 2.3.29 Description Authenticated attackers with Subscriber-level access or higher can elevate their privileges to Administrator. This occurs because the ajax ayi actio...

CVE-2026-9279: Improper Neutralization of Special Elements used in an OS Command

Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name e.g. git, pandoc, grep, the argument string is concatenated with the command and passed to childprocess.spawn with the shell: true option, allowing shell...

CVE-2026-11785: Access of Resource Using Incompatible Type

A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated users...

Linux Distros Unpatched Vulnerability : CVE-2026-11329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in onnx onnx-mlir up to 0.5.0.0. Affected by this issue is the function generatehashkey of the file...

CVE-2026-49841: Heap-based Buffer Overflow

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...

BlackVue Dashcam 590X Configuration Handler Disclosure

The vulnerability of the Configuration Handler component in the /upload.cgi file of the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow an intruder to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-11785

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed ...

CLSA-2026-1779178796 php: Fix of 3 CVEs

CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP tozvalmap NULL pointer dereference...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value through the ReceivePackHandler via addthinpack/applydelta flows when handling crafted thin packs with attacker-controlled delta headers. An attacker can cause excessive memory allocation by...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +7029 more potentially affected by CVE-2026-45416 via io.netty:netty-handler (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-handler MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-45416 Source advisory: OSV:GHSA-X4GW-5CX5-PGMH...

GHSA-X4GW-5CX5-PGMH Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

SslClientHelloHandler.decode reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates ctx.alloc.bufferhandshakeLength line 161. The guard at line 140 is handshakeLength maxClientHelloLength && maxClientHelloLength != 0, and the...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +7029 more potentially affected by CVE-2026-45416 via io.netty:netty-handler (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-handler MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-45416 Source advisory: GHSA-X4GW-5CX5-PGMH...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +7029 more potentially affected by CVE-2026-45416 via io.netty:netty-handler (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-handler MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-45416 Source advisory: SNYK:JAVA-IONETTY-17254117...

Allocation of Resources Without Limits or Throttling

Overview io.netty:netty-handler is a library that provides an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which...

GHSA-CMM3-54F8-PX4J Netty's Default QUIC token handler accepts any client-supplied token

NoQuicTokenHandler is the tokenHandler used when the application does not set one. Its writeToken returns false server will not send Retry — acceptable, but validateToken unconditionally return 0. In QuicheQuicServerCodec.handlePacket, a non-negative return from validateToken is interpreted as...

CVE-2026-46297

A flaw was found in the Linux kernel's libwx network driver. Incorrect handling of virtual function VF miscellaneous interrupts, specifically using requestthreadedirq with a null threaded handler and the IRQFONESHOT flag, can trigger a kernel warning. This issue may lead to system instability or...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +7029 more potentially affected by CVE-2026-44249 via io.netty:netty-handler (>=4.2.0.final, <=4.2.14.final)

io.netty:netty-handler MAVEN version =4.2.0.final, =0.4.0, =0.4.0, =1.0.0-beta, =0.6.4, =0.6.4, =0.6.4, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =4.13.5, =4.13.5, =4.14.0-rc.2 and more Source cves: CVE-2026-44249 Source advisory: GHSA-3QP7-7MW8-WX86...