101703 matches found
CVE-2026-100890 Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...
Important: gstreamer1-plugins-base
Issue Overview: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an...
PT-2026-99737
Name of the Vulnerable Software and Affected Versions OpenDMARC versions prior to 1.4.3 Description A flaw in the SPF Parser component exists within the opendmarc spf ipv6 explode function located in the libopendmarc/opendmarc spf.c library. A remote attacker can trigger a null pointer dereferenc...
PT-2026-99742
Name of the Vulnerable Software and Affected Versions Trusted Domain Project OpenARC versions prior to 1.0.0.Beta0 Description A security flaw in the libopenarc component allows for a remote attack. The issue resides in the arc parse canon t function within the libopenarc/arc-canon.c library, whe...
CVE-2026-100890: NULL Pointer Dereference
A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcspfipv6explode in the library libopendmarc/opendmarcspf.c of the component SPF Parser. This manipulation of the argument cp causes null pointer dereference. It is possibl...
ROS-20260928-73-0038
The vulnerability of the parseapplysbmountoptions function in the Linux operating system is related to errors that occur when a string or array is terminated with the NULL character. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-102412
Name of the Vulnerable Software and Affected Versions Zephyr LwM2M client affected versions not specified Description The parse write op function in subsys/net/lib/lwm2m/lwm2m message handling.c contains a NULL pointer dereference when handling inbound CoAP WRITE/CREATE requests with a Block1...
CVE-2026-100895: NULL Pointer Dereference
A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arcparsecanont in the library libopenarc/arc-canon.c of the component libopenarc. The manipulation results in null pointer dereference. The attack may be launched remotely. The exploi...
The vulnerability of the PHP interpreter, related to the assignment of the null pointer, allows attackers to trigger a service failure.
The vulnerability of the PHP interpreter is related to pointer operations. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-100627
Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...
EUVD-2026-87721
Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...
CVE-2026-100627 Capgo bundle promotion API channel RBAC deny override bypass
Capgo Cap-go/capgo.app server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. The PUT /bundle endpoint, available to "all" and "write" API keys, dispatches to setChannel, which authorizes with checkPermissionc, 'channel.promotebundle', appI...
CVE-2026-100627
The Capgo (Cap-go/capgo.app) server backend Supabase functions contain an incorrect authorization flaw in the API-key bundle promotion path. Specifically, the PUT /bundle endpoint (accessible via "all" and "write" API keys) dispatches to setChannel, which fails to include the channel_id during th...
openSUSE 16 Security Update : 389-ds (openSUSE-SU-2026:21950-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21950-1 advisory. - CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check bsc1273133. - CVE-2026-18355: heap buffer overflow in the SASL I/O...
SUSE CVE-2026-88384
OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with dataSize set to zero causes the parser to create an opaque attribute with a NULL packeddata pointer. The OpaqueAttribute constructor passes...
SUSE CVE-2026-98129
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mrsasportadd sasportallocnum can return NULL on memory allocation failure. The return value is passed directly to sasportadd without a NULL check, which causes a NULL pointer...
CVE-2026-92842
A flaw was found in PHP. When processing certain conversion stream filters with line-break settings containing a null byte, the filter duplicates the string but retains the original length rather than the truncated size. An attacker who can influence filter options could exploit this out-of-bound...
CVE-2026-88389
Espruino 2v29 commit bffc6d0 contains a NULL pointer dereference vulnerability in jslGetRawString in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain. In RELEASE/NOASSERT builds, the missing assertion guard allows a write through the...
[SECURITY] [DLA 4795-1] openssl security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4795-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout September 25, 2026 https://wiki.debian.org/LTS -...
AZL-104874 CVE-2026-98134 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: bpf: checkcondjmpop: properly infer if register is null Nicholas Carlini reported a bug when verifier can incorrectly infer that a pointer is non-null. The bug occurs when two pointers are compared and one of them has a type w/o...