27293 matches found
postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
A type validation flaw has been discovered in PostgreSQL. Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database...
postgresql: PostgreSQL missing validation of multibyte character length executes arbitrary code
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database...
postgresql: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
A heap based buffer overflow flaw has been discovered in PostgreSQL. This Heap buffer overflow is in the pgcrypto component and allows a ciphertext provider to execute arbitrary code as the operating system user running the database...
postgresql: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
A type validation flaw has been discovered in PostgreSQL. Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database...
GHSA-7WC2-QXGW-G8GG vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2023-43010
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2, Safari 17.2, iOS 16.7.15 and iPadOS 16.7.15, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption...
EUVD-2026-11478
A vulnerability was found in 0xKoda WireMCP up to 7f45f8b2b4adeb76be8c6227eefb38533fdd6b1e. Impacted is the function server.tool of the file index.js of the component Tshark CLI Command Handler. The manipulation results in os command injection. The attack needs to be approached locally. The explo...
Moderate Photon OS Security Update - PHSA-2026-5.0-0784
Updates of 'mariadb' packages of Photon OS have been released...
The vulnerability of the drm_sched_entity_kill_jobs_cb() function in the drivers/gpu/drm/scheduler/sched_entity.c file of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the drmschedentitykilljobscb function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the registration broker for Windows Auxiliary Technologies’ ATBroker.exe operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ATBroker.exe process responsible for registering auxiliary technologies in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the drivers/net/ethernet/mellanox/mlx5 kernel component of the Linux operating system is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the SMB server for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...
Deno 操作系统命令注入漏洞
Deno is a simple, modern, and secure JavaScript and TypeScript runtime environment developed by Deno itself. Version 2.7.0 to 2.7.1 of Deno contains a vulnerability related to operating system command injection. This vulnerability stems from a command injection issue within the node:childprocess...
The vulnerability of the sound/soc/intel/avs component in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the sound/soc/intel/avs component in Linux operating systems is related to the dereferencing of a pointer with an expired reference count. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the SMB server for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the SMB server for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2026-3930
Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-11305
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. In 2026.01 and earlier, the default handler for the wellknowncore resource coapwellknowncoredefaulthandler writes user-provided option data and...
CVE-2026-27703
RIOT OS contains a vulnerability in the default handler for the well_known_core resource (coap_well_known_core_default_handler). In 2026.01 and earlier, it writes user-provided option data and other data into a fixed-size buffer without validating the destination size, enabling an out-of-bounds w...
CVE-2026-27703 RIOT has an Out-of-Bounds Write in nanoCoAP Handler
RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. In 2026.01 and earlier, the default handler for the wellknowncore resource coapwellknowncoredefaulthandler writes user-provided option data and...