683 matches found
CVE-2021-28476
CVE-2021-28476: Microsoft Hyper-V: Multiple Vulnerabilities in vmswitch Multiple bugs are present in WPP code when handling set OID requests, one of them allowing to dereference read access an attacker controlled pointer, and the rest causing out of bounds read accesses. This repository contains...
CVE-2026-122318
Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...
CVE-2026-122318 Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates
Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...
CVE-2026-122318
Kyverno versions before 1.19.2 are vulnerable to an authentication bypass in the matchCertificateData function. The root cause is that the system skips verifyImages subject and subjectRegExp checks when a signing certificate lacks a Subject Alternative Name (SAN) . An attacker possessing a leaf c...
PT-2026-137339
Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured private trust root can omit the SAN, set th...
DEBIAN-CVE-2026-120067
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067 psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067 psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067
The psqlODBC driver (versions before 18.00.0006 ) is vulnerable to a stack-based buffer overflow when using updatable cursors. The issue occurs because the driver copies ctid and oid values into a fixed 32-byte stack buffer using the length provided by the server without performing adequate bound...
CVE-2026-120067 psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
CVE-2026-120067: PostgreSQL psqlODBC: For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns…
For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a 32-byte stack buffer using the length the server sent, without checking it against the buffer size, so a value of 32 bytes or more writes...
PT-2026-135657
Name of the Vulnerable Software and Affected Versions psqlODBC versions prior to 18.00.0006 Description For updatable cursors, which are enabled by default, the driver adds hidden ctid and oid columns to the query. The driver copies each value into a 32-byte stack buffer using the length sent by...
Linux Distros Unpatched Vulnerability : CVE-2026-120067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query. It copies each value into a...
SUSE CVE-2026-118775
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted OID string, checked or authorized that string, and then encod...
Forge: ASN.1 OID First Arc Truncation In Asn1.oidToDer
Summary "asn1.oidToDer" did not range-check the first two arcs of an OID string, so an OID such as "0.42.840.113549.1.1.1" or "4294977127.18.840.113549.1.1.1" was encoded as the DER of a different OID here rsaEncryption, "1.2.840.113549.1.1.1". This is an incomplete fix of CVE-2025-66030. Fixed i...
Linux Distros Unpatched Vulnerability : CVE-2026-118775
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not...
GHSA-4642-5MCJ-2RQW Forge: ASN.1 OID first arc truncation in asn1.oidToDer
Summary asn1.oidToDer did not range-check the first two arcs of an OID string, so an OID such as 0.42.840.113549.1.1.1 or 4294977127.18.840.113549.1.1.1 was encoded as the DER of a different OID here rsaEncryption, 1.2.840.113549.1.1.1. This is an incomplete fix of CVE-2025-66030. Fixed in...
