4067 matches found
CVE-2026-6244 division by zero in libpcap before 1.10.7
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
CVE-2026-6244
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
EUVD-2026-72018
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
CVE-2026-6244
libpcap versions before 1.10.7 contain a division by zero flaw in the BPF interpreter. The div #k and mod #k ALU instructions do not check whether the immediate value is zero, allowing a crafted filter program to trigger a divide-by-zero in uncommon use cases. The vulnerability is locally exploit...
CVE-2026-6244 division by zero in libpcap before 1.10.7
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
openvpn v2.7.7
OpenVPN -- A Secure tunneling daemon Copyright C 2002-2026 OpenVPN Inc. This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 as published by the Free Software Foundation. To get the latest release of OpenVPN, go to:...
PT-2026-86445
Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to verify if the immediate value is zero when processing 'div k' and 'mod k' ALU instructions. This allows a specially crafted filter program to trigger a division b...
CVE-2026-6244: Divide By Zero
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
Linux Distros Unpatched Vulnerability : CVE-2026-6244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a...
ckb-vm v0.24.15
Nervos CKB VM About CKB VM CKB VM is a pure software implementation of the RISC-V instruction set used as scripting VM in CKB. Right now it implements full IMCB instructions for both 32-bit and 64-bit register size support. In the future we might also implement V extensions to enable better crypt...
NPM: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
NPM: CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository vulnerability discovered by ? in WordPress Npm deepseek-tui versions = 0.8.8, 0.8.41...
NPM: CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
NPM: CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository vulnerability discovered by ? in WordPress Npm codewhale versions = 0.8.41, 0.8.64...
GHSA-62F5-CP2P-VQ95 CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 43563356b98c6b993085554da82e77370160a31c. Users should upgrade to 0.8.64 or later. The original reporter analysis is...
CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository
Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in the advisory metadata. Version 0.8.64 contains the fix in commit 43563356b98c6b993085554da82e77370160a31c. Users should upgrade to 0.8.64 or later. The original reporter analysis is...
ROS-20260904-73-0001
The vulnerabilities of the Branch Target Buffer BTB and Indirect Branch Predictor IBP in Intel microprogramming devices stem from the state of the race within the pipeline. Exploiting these vulnerabilities can allow attackers to disclose protected information by executing specially crafted...
CVE-2026-83616
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. An attacker can exploit a vulnerability in how processing instructions are handled to inject arbitrary XML structures. This occurs because the software fails to properly validate input, allowing special characters to...
CVE-2026-83606
A flaw was found in xmldom, a JavaScript XML DOM parser. This vulnerability, a Regular Expression Denial of Service ReDoS, occurs due to inefficient processing of unterminated processing instructions in XML input. A remote, unauthenticated attacker can send a specially crafted XML input, causing...
Regular Expression Denial of Service (ReDoS)
Overview @xmldom/xmldom is a javascript ponyfill to provide the following APIs that are present in modern browsers to other runtimes. Since version 0.7.0 this package is published to npm as @xmldom/xmldom and no longer as xmldom Affected versions of this package are vulnerable to Regular Expressi...
CVE-2026-83606 xmldom PI grammar regex ReDoS: quadratic backtracking on unterminated processing instructions
xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. From 0.9.0-beta.9 until 0.9.11, the processing-instruction production in lib/grammar.js lets the greedy S+ separator and lazy Char? data group repeatedly repartition a long whitespace tail when...
CVE-2026-55894
A flaw was found in Capstone, a disassembly framework. The shdisassemble function incorrectly processes 16-bit instructions, leading to an attempt to read data from an unauthorized memory location an out-of-bounds read. A remote attacker could exploit this by providing specially crafted bytecode ...