55750 matches found
Oracle Linux 10 : mingw-glib2 (ELSA-2026-18344)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-18344 advisory. 2.87.0-1 - Update to 2.87.0 - RHEL-130993 - CVE-2025-13601 mingw-glib2: Integer overflow in in gescapeuristring Tenable has extracted the preceding descriptio...
RockyLinux 9 : pacemaker (RLSA-2026:39323)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39323 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...
RockyLinux 8 : pacemaker (RLSA-2026:39322)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:39322 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...
RHEL 9 : pacemaker (RHSA-2026:39323)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39323 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...
AlmaLinux 8 : pacemaker (ALSA-2026:39322)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:39322 advisory. pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression CVE-2026-10649 Tenable has extracted the preceding description block...
RHEL 8 : pacemaker (RHSA-2026:39322)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:39322 advisory. The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in t...
CVE-2026-48354
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
JLSEC-2026-703
An integer overflow vulnerability existed in the static function wolfssladdtochain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssladdtochain is called by these API: wolfSSLCTXaddextrachaincert,...
CVE-2026-48354
CVE-2026-48354 concerns CAI Content Credentials and describes an Integer Overflow or Wraparound (CWE-190) that could cause an application denial-of-service. Exploitation does not require user interaction and could crash the application. The available documents confirm the impact (availability los...
CVE-2026-48354
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
CVE-2026-48342
Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-48342
CVE-2026-48342 affects Bridge. It is an Integer Overflow or Wraparound vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: a victim must open a malicious file. The available documents provide the vulnerable componen...
CVE-2026-48342 Bridge | Integer Overflow or Wraparound (CWE-190)
Bridge is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
USN-8543-1: Wget vulnerabilities
It was discovered that Wget mishandled semicolons in the userinfo subcomponent of a URL. A remote attacker could possibly use this issue to trick a user into connecting to a different host than intended. This issue only affected Ubuntu 14.04 LTS. CVE-2024-38428 It was discovered that Wget...
pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression
A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial...
CVE-2026-58594
Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network...
CVE-2026-58532
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-56647
Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...