393192 matches found
CVE-2026-104633 Gitea migration memory exhaustion from zero page size
When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reported maxresponseitems as 0 made these loops run indefinitely and grow server memory until it was exhausted. Any user who...
DEBIAN-CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
DEBIAN-CVE-2026-104046
A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...
CVE-2026-104046
A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
DEBIAN-CVE-2026-101258
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
CVE-2026-101258
A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path...
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting
A flaw was found in perl-DBI. When casting numeric values to the SQLNUMERIC type using the sqltypecast function, the component incorrectly handles numeric values as strings without converting them first. An attacker capable of supplying numeric input to an affected application can trigger an...
Important: Red Hat Security Advisory: perl-DBI security update
An update for perl-DBI is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
lmg
Linux Memory Grabber Скрипт для дампа памяти Linux и создания профилей VolatilityTM. Hal Pomeranz [email protected], 2020-02-01 БЛАГОДАРНОСТИ! «Если я видел дальше, то только потому, что стоял на плечах гигантов.» Исаак Ньютон Многие заслуживают благодарности за то, что сделали возможным это...
CVE-2026-104045 Sssd: sssd: denial of service via race condition in autofs responder
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
CVE-2026-104045
A race condition in the SSSD autofs responder allows a local user to trigger a Denial of Service (DoS) . By sending concurrent map enumeration and invalidation requests, an attacker can cause a memory leak , resulting in excessive memory consumption that may disrupt or crash the autofs service . ...
EUVD-2026-94006
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
CVE-2026-104045 Sssd: sssd: denial of service via race condition in autofs responder
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
CVE-2026-104045
A flaw was found in SSSD. A local user can trigger a Denial of Service DoS by exploiting a race condition in the autofs responder between asynchronous enumeration completion and map invalidation. By repeatedly sending concurrent map enumeration and invalidation requests, an attacker can cause...
CVE-2026-98170
A flaw was found in the Linux kernel's SMB client. When processing extended file attributes returned by a server, insufficient buffer validation allows the kernel to read data past the allocated boundaries. A malicious or compromised server could exploit this issue by returning a malformed...
keepass-password-dumper
KeePass 2.X — дампер мастер-пароля CVE-2023-32784 Обновление Уязвимости присвоен идентификатор CVE-2023-32784, и она исправлена в KeePass 2.54. Ещё раз спасибо Доминику Райхлю за быструю реакцию и креативное исправление! Уточнение: пароль должен быть введён с клавиатуры, а не скопирован из буфера...
CVE-2026-76753
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...
CVE-2026-76747
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents and cause a denial of service on the device...