61631 matches found
Moderate: cups-filters security update
The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PN...
RockyLinux 9 : cups-filters (RLSA-2026:58560)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:58560 advisory. libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG CVE-2026-64612 Tenable has extracted the preceding description...
CVE-2026-56135: Heap-based Buffer Overflow
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
CVE-2026-56135
In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function buildinheritedid in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted...
CVE-2026-56136
In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfsirnill in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name...
Exploit for CVE-2026-66917
IDOR + Stored XSS via Broken Object-Level Authorization in Joo...
Exploit for CVE-2026-66916
Password-Protected Category Bypass via JSON Format in JoomGall...
SUSE CVE-2026-74723
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
AZL-97308 CVE-2026-74723 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-74723
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-74723
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-74723 btrfs: lzo: reject inline extents without valid headers
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
EUVD-2026-64410
In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject inline extents without valid headers BUG For a crafted btrfs image, the following KASAN can be triggered when reading an inline lzo compressed file extent: BUG: KASAN: slab-out-of-bounds in...
CVE-2026-74723
A slab-out-of-bounds read in the Linux kernel's btrfs LZO decompression path is triggered when a crafted btrfs image contains an inline LZO compressed file extent with only an LZO header but no segment header or payload. The lzo_decompress() function reads beyond the item boundary; if the extent ...
CVE-2026-76606
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.2...
CVE-2026-76605
Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik 4.7.2...
CVE-2026-76606 Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2
Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik 4.7.2...
CVE-2026-76606
Fabrik is a Joomla extension that is vulnerable to path traversal via its image element in versions prior to 4.7.3 . The CVSS 4.0 base score is 10.0 (CRITICAL) , indicating network-exploitable impact with no required privileges or user interaction, affecting confidentiality, integrity, and availa...