CVE-2026-103531 OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

CVE-2026-103531 OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

CVE-2026-103531 OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

CVE-2026-103531

A stack-based buffer overflow vulnerability exists in OpenSC versions up to 0.27.1 . The flaw is located in the setcos_construct_fci_44 function within the src/libopensc/card-setcos.c file. Specifically, manipulating the type_attr argument can trigger the overflow. This vulnerability can be explo...

EUVD-2026-90449

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

CVE-2026-103531

A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcosconstructfci44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the argument typeattr can lead to stack-based buffer overflow. The attack can be launched remotely. This patch is called...

SUSE CVE-2026-102804

A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the function hexwaveinit in the library stbhexwave.h. Performing a manipulation of the argument width/oversample results in integer overflow. Remote exploitation of the attack is...

EUVD-2026-90447

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...

CVE-2026-103530

A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provideroptions.baseUrl results in server-side request forgery. The attack...

PT-2026-103695

A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

PT-2026-103712

A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/ai client.py of the component Al Provider Configuration Handler. Performing a manipulation results in exposure of data element to...

CVE-2026-103543: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1775669856)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1775669856 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and...

AlmaLinux 9.6 [TuxCare] Security Update: pki-jackson-databind (ALMALINUX9.6:CLSA-2026:1787889621)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787889621 advisory. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18....

AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (ALMALINUX9.2:CLSA-2026:1773830791)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1773830791 advisory. - A weakness has been identified in libssh up to 0.11.3. The impacted element is the function sftpextensionsgetname/sftpextensionsgetdata of...

Rocky Linux 9.6 [TuxCare] Security Update: pki-jackson-databind (ALMALINUX9.6:CLSA-2026:1787889621)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787889621 advisory. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until...

CentOS Linux 7 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1786523775)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1786523775 advisory. - To keep its cache database efficient, named running as a recursive resolver occasionally attempts to clean up the database. It uses...

CentOS Linux 6 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS6:CLSA-2026:1778745959)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778745959 advisory. - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

AlmaLinux 9.2 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777949670)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777949670 advisory. - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tgtagtype of the file prdbg.c. Performing a...

CentOS Linux 7 [TuxCare] Security Update: bpftool / kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1775657929)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1775657929 advisory. - In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a chec...