85646 matches found
CVE-2026-5459
The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.1 via the paymentpage function due to missing validation on the 'userid' user...
BIT-PILLOW-2026-54060 Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`
Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per-glyph images into a combined bitmap with Image.new"1", xsize, ysize without calling Image.decompressionbombcheck, allowing a font to trigger excessive allocation during conversion or saving. This...
UBUNTU-CVE-2026-56003
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...
RHSA-2026:36633 Red Hat Security Advisory: xorg-x11-server-Xwayland security update
Bulletin has no description...
RHSA-2026:36366 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:36211 Red Hat Security Advisory: freeipmi security update
Bulletin has no description...
RHSA-2026:36103 Red Hat Security Advisory: firefox security update
Bulletin has no description...
RHSA-2026:36073 Red Hat Security Advisory: kernel security update
Bulletin has no description...
DEBIAN-CVE-2026-56001
A heap buffer overflow in BitmapScaleBitmaps in libXfont2 before 2.0.8 due to an overflowing 32bit size could be used by attackers able to access the X Server to execute code within the X server cont...
DEBIAN-CVE-2026-56000
Local attackers with a X connection able to provide GLX commit to the X server xorg-server before 21.2.24 and xwayland before 24.1.13 could cause a Heap Use After Free, due to CommonMakeCurrent pointing into potentially reallocated memory...
CVE-2026-56002
A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code within the X server...
SUSE-SU-2026:2793-1 Security update for libXfont2
This update for libXfont2 fixes the following issues - CVE-2026-56001: integer overflow in BitmapScaleBitmaps can lead to a heap buffer overflow bsc1269018. - CVE-2026-56002: insufficient checks in pcfReadFont can lead to a heap buffer overflow bsc1269019. - CVE-2026-56003: missing bounds check i...
MINI-GV3W-J8JC-74C9
Bulletin has no description...
MINI-RM8R-93X4-F8QV
Bulletin has no description...
MINI-XF64-P5RG-W68P
Bulletin has no description...
MINI-H55G-CFG2-H7WX
Bulletin has no description...
MINI-8G3C-JVHH-Q3XF
Bulletin has no description...
MINI-WRW3-QCJC-3J6Q
Bulletin has no description...