4442 matches found
CVE-2026-64200 Out Of Bounds Read in during string conversionwhen parsing a .DSB file in DASYLab
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...
CVE-2026-64199 Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue...
CVE-2026-64199
CVE-2026-64199 is an out-of-bounds read vulnerability in DASYLab (MEAS X) caused by improper validation of user-supplied data when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted file, making it a local attack vector with no privileges required but user i...
CVE-2026-64199 Out Of Bounds Read outside the bounds of an allocated data structure when parsing a .DSB file in DASYLab
There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read outside the bounds of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue...
CVE-2026-64198
CVE-2026-64198 is an out-of-bounds read in DASYLab (MEASX) caused by improper validation of user-supplied data during file handling. A read a few bytes past the end of an allocated heap buffer occurs when parsing a .DSB file . Successful exploitation requires a user to open a specially crafted .D...
CVE-2026-64197
CVE-2026-64197 is an out-of-bounds write vulnerability in DASYLab (National Instruments), caused by improper validation of user-supplied data during parsing of .DSB files , resulting in a write past the end of an allocated data structure. Exploitation requires a user to open a specially crafted ....
CVE-2026-64197 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...
CVE-2026-64197 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated data structure. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all...
CVE-2026-64196 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions...
CVE-2026-64196 Out Of Bounds Write when parsing a .DSB file in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap
There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulting in a write past the end of an allocated heap. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions...
CVE-2026-64196
DASYLab (NI/MeasurementX) contains an out-of-bounds heap write vulnerability caused by improper validation of user-supplied data during parsing of .DSB files. Successful exploitation requires a local attacker to get a user to open a specially crafted file, yielding High impact on confidentiality,...
CVE-2026-64195 Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data
There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0...
CVE-2026-9036
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2026-9744 Vulnerabilities exists in IBM Netezza Software
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2026-9036
IBM Netezza Software versions 11.3.0.3 through Interim Fix 002 contain a TLS certificate validation flaw where the software does not validate or improperly validates TLS certificates. This allows a network-based attacker to perform a man-in-the-middle attack to obtain sensitive information , with...
EUVD-2026-70743
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2026-9036 Vulnerabilities exists in IBM Netezza Software
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2026-53728 Medplum - Improper Validation of Redirect URI in External Auth Callback allows Authorization Code Leakage
Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than matching exactly...
CVE-2026-85394
python-jose through 3.5.0 fails to properly validate asymmetric keys in HMAC initialization, accepting DER-encoded public keys that lack PEM armor or SSH prefixes. Attackers holding the service's public key can forge HS256 tokens that pass verification when algorithms are not explicitly restricte...