29724 matches found
UBUNTU-CVE-2026-51400
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...
CVE-2026-68743 Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1
A flaw was found in SSSD. The extractauthtokv1 function in the PAM responder does not validate the authtokenlength field against the remaining buffer size before processing. A local attacker can exploit this via a crafted protocol v1 request to the PAM responder socket, causing an out-of-bounds...
CVE-2026-18755
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
CVE-2026-18755 GV-ASManager DLL hijacking vulnerability
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
CVE-2026-18755
The CVE-2026-18755 entry describes a DLL hijacking vulnerability in GeoVision GV-ASManager. An attacker who has write access to an unsafe application search directory can place a crafted DLL into the search path, causing the GV-ASManager process to load and execute the malicious library with its ...
EUVD-2026-52639
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
CVE-2026-18755 GV-ASManager DLL hijacking vulnerability
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
CVE-2026-68744
A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...
kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown
A flaw was found in the Linux kernel. A race condition exists in the timershutdownsync function, where a timer's function pointer can be set to NULL while the timer is still active on another processor. This can be exploited by a local attacker to trigger a kernel warning, potentially leading to...
EUVD-2026-52577
A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...
kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown
A flaw was found in the Linux kernel. A race condition exists in the timershutdownsync function, where a timer's function pointer can be set to NULL while the timer is still active on another processor. This can be exploited by a local attacker to trigger a kernel warning, potentially leading to...
CVE-2026-51400
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...
CVE-2026-51401: Improper Control of Generation of Code
An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...
CVE-2026-18755: Unquoted Search Path or Element
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
Linux Distros Unpatched Vulnerability : CVE-2026-68744
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the...
PT-2026-67643
Name of the Vulnerable Software and Affected Versions SSSD affected versions not specified Description A flaw exists in the NSS responder where the sss nss protocol fill initgr function pre-allocates reply space for all group entries but fails to shrink the packet when groups are skipped. This...
CVE-2026-51401
The Vim Project (v9.2.0389 and earlier) contains a vulnerability in the vms_fixfilename() function located in the vim/src/os_vms.c file. This flaw stems from incorrect code generation , which allows a local attacker to execute arbitrary code on the system. Successful exploitation could result in ...
PT-2026-67675
A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...
