397985 matches found
CVE-2026-103223
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...
EUVD-2026-101961
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...
CVE-2026-102462
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...
CVE-2026-102462
The io.vertx:vertx-mssql-client component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] contains a vulnerability in the TDS message decoder . The decoder aggregates inbound TDS packets into a composite direct-memory buffer without a cumulative siz...
CVE-2026-102462
In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the TDS message decoder in the Vert.x MSSQL client vertx-mssql-client aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or...
Security update for iperf
This update for iperf fixes the following issues: CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remote...
SUSE-SU-2026:4678-1 Security update for iperf
This update for iperf fixes the following issues: - CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion bsc1284405. - CVE-2026-71218: unbounded peer-controlled allocation in JSONread allows unauthenticated remot...
CVE-2026-102475
In Eclipse Vert.x versions 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to ensure a bounded buffer for each request. This can be used to force a server to indefinitely allocate heap. This vulnerabilit...
CVE-2026-79821
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down...
CVE-2026-101309
The bhyve hypervisor contains a race condition in its xHCI (USB 3) device model. The model fails to validate or save the event ring size provided by the guest, re-reading it from guest memory on each use. Furthermore, Transfer Request Block (TRB) fields are loaded without protection against concu...
CVE-2023-25136
CVE-2023-25136 OpenSSH 9.1 Vulnerability Mass Scanning and Exploitation Vulnerability Details OpenSSH is software that implements the SSH protocol, commonly used to securely connect to Linux or Windows machines for remote administration. The CVE-2023-25136 security vulnerability introduced in...
webkit-vulnerability
webkit-vulnerability CVE-2016-4657 web-kit vulnerability for ios 9.3, nintendo switch browser vulnerability iknow whats running in your mind nintendo switch has no no browser, but when you neetd to use a wifi which needs to be conformed by logging in to the browser CVE-2016-45657 webkit in safari...
fix_nginx_cve_2026_42945
NGINX CVE-2026-42945 One-Click Fix Script Automatically detect OS distribution, upgrade NGINX to the fixed version ≥1.30.1, backup configuration, and auto-rollback. Vulnerability Description Vulnerability ID: CVE-2026-42945 Vulnerability Name: NGINX Rift When NGINX processes specific rewrite...
EUVD-2025-211092
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync...
CVE-2025-29897 Stack-based Buffer Overflow in qsyncsrv.cgi
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync...
CVE-2025-29897
The software Qsync Central is affected by a buffer copy without checking size of input vulnerability, specifically identified as a stack-based buffer overflow in qsyncsrv.cgi . A remote attacker who has obtained a user account can exploit this flaw to modify memory or crash processes . The vulner...
EUVD-2026-101859
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down...
CVE-2026-79821
A security vulnerability in HPE NonStop SOAP 4.0 (specifically version T0865L01^ACN and earlier) may lead to memory corruption caused by improper input validation, potentially resulting in a system down condition. HPE has released fixes to address this; users should upgrade to version T0865L01^AC...
CVE-2026-79821 HPE NonStop SOAP 4.0 - Memory corruption
A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down...
CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation
When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...