CVE-2026-110661

A flaw was found in CGNS. An attacker could exploit this vulnerability by enticing a user to open a specially crafted data file, resulting in a Denial of Service DoS. Due to improper boundary validation when parsing node headers, the application performs an out-of-bounds read past the buffer,...

CVE-2026-110661 CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header

CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFIstridxc to scan past disknodedata,...

CVE-2026-110661

CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFIstridxc to scan past disknodedata,...

CVE-2026-110661: Out-of-bounds Read

CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFIstridxc to scan past disknodedata,...

Drupal Spotlight Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Spotlight module versions 7.x-1.5 prior to 7.x-1.x, which can be exploited by a remote attacker with specific...

Drupal Cloudwords for Multilingual Drupal module cross-site scripting vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community. cloudwords for Multilingual Drupal is one of the modules that provides multiple language translations. A cross-site scripting vulnerability exists in the Drupal Cloudwords for...

PT-2012-6034

Name of the Vulnerable Software and Affected Versions Drupal Table of Contents module versions 6.x-3.x before 6.x-3.8 Description The issue allows remote attackers to read a node's headers by accessing a table of contents block due to improper node permission checks. Recommendations For versions...