21138 matches found
EUVD-2026-95009
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
firefox: Privilege escalation due to invalid pointer in the Graphics component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...
firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: WebAssembly component...
RLSA-2026:77576 Important: perl-DBI security update
The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...
CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-RE57031 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
CVE-2026-42504 affects multiple packages. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...
AlmaLinux 8 : perl-DBI (ALSA-2026:77576)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:77576 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...
RockyLinux 8 : perl-DBI (RLSA-2026:77576)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:77576 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...
CVE-2026-106433: Access of Resource Using Incompatible Type
Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate masterKey fields. An authenticated actor who can modify key vault documents, or a server that returns such a key document,...
PT-2026-108138
Name of the Vulnerable Software and Affected Versions libmongocrypt affected versions not specified Description Improper state management occurs when cleaning up a key document that contains duplicate masterKey fields, causing provider-specific data to be treated as an incompatible type. An...
PT-2026-107981
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 Description The MVG decoder contains an invalid memory free issue. An attacker can provide a specially crafted MVG image for processing to trigger this invalid free...
RockyLinux 9 : perl-DBI (RLSA-2026:76760)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:76760 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description block...
CVE-2026-95210
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
RHEL 9 : perl-DBI (RHSA-2026:76760)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76760 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...