73853 matches found
Red Hat Security Advisory 2026-55802-03
Red Hat Security Advisory 2026-55802-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55803-03
Red Hat Security Advisory 2026-55803-03 - An update for haproxy is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Issues addressed include denial of service and integer overflow vulnerabilities...
Red Hat Security Advisory 2026-55865-03
Red Hat Security Advisory 2026-55865-03 - An update for multiple packages is now available for Red Hat Enterprise Linux 9. Issues addressed include integer overflow, out of bounds read, and out of bounds write vulnerabilities...
Apple Security Advisory 08-17-2026-2
Apple Security Advisory 08-17-2026-2 - iOS 18.7.10 and iPadOS 18.7.10 addresses buffer overflow, bypass, code execution, heap corruption, information leakage, integer overflow, out of bounds access, out of bounds read, out of bounds write, and use-after-free vulnerabilities...
AlmaLinux 9 : haproxy (ALSA-2026:55772)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:55772 advisory. haproxy: HAProxy: Denial of Service via HPACK dynamic table insertions CVE-2026-55204 haproxy: HAProxy: Response smuggling due to integer overflow in...
PT-2026-77010
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description An integer overflow occurs within the Graphics component. An integer overflow is a condition...
AlmaLinux 10 : gstreamer1-plugins-ugly-free (ALSA-2026:55435)
The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:55435 advisory. gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux bounds checks leading to out-of-bounds read CVE-2026-19389 Tenable has...
Linux Distros Unpatched Vulnerability : CVE-2026-74297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1 rqwqeshift based on the user-provided rqwqeshift, which is only check...
Linux Distros Unpatched Vulnerability : CVE-2026-72326
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/sched: cake: reject overhead values that underflow length CAKE accepts signed overhead values and stores them in an s16, but the adjusted packet length...
RHEL 9 : haproxy (RHSA-2026:55772)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55772 advisory. The haproxy packages provide a reliable, high-performance network load balancer for TCP and HTTP-based applications. Security Fixes: haprox...
Amazon Linux 2 : pcp, --advisory ALAS2-2026-3857 (ALAS-2026-3857)
The version of pcp installed on the remote host is prior to 4.3.2-12. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3857 advisory. A flaw in the PCP linuxsockets module exposes an unsecured internal connection.An attacker with initial code execution can...
CVE-2026-50142: Integer Overflow or Wraparound
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heifcontextreadfrommemory with the msf1 sequence brand can cause unbounded heap allocation. In libheif/sequences/seqboxes.cc, Boxstsz::parse applies maxsequenceframes only to...
CVE-2026-50161: Integer Overflow or Wraparound
libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websockdecode function in src/websock/websock.c contains an integer overflow when validating a masked WebSocket frame that uses the 64-bit extended length encoding. The expressi...
CVE-2026-62357: Integer Overflow or Wraparound
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...
CVE-2026-74977: Integer Overflow or Wraparound
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74964: Integer Overflow or Wraparound
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
PT-2026-80349
frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp...
PT-2026-80456
Integer overflow in BTF parsing in github.com/cilium/ebpf...
PT-2026-77152
Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40.0, CMS.INITBYDIM and CMS.INITBYPROB accept dimensions whose width times depth times sizeofint64 t overflows in src/core/cms.cc, allocating an undersized counter buffer while CMS.INCRBY and CMS.QUERY use the...
