399685 matches found
CVE-2026-71912 DrayTek VigorAP Multiple Models Buffer Overflow via apautotest
Multiple DrayTek VigorAP models contain a buffer overflow vulnerability in the apautotest function. The vulnerability is caused by missing length checks during memory copy operations involving the CMD6 field. A remote attacker can trigger this vulnerability via crafted input, causing a denial of...
ROOT-OS-DEBIAN-13-CVE-2026-27171 CVE-2026-27171 in zlib - Patched by Root
Root has patched CVE-2026-27171 in the zlib package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-77652
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...
ROOT-OS-DEBIAN-13-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root
Root has patched CVE-2026-58469 in the wget package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-50252 CVE-2026-50252 in unbound - Patched by Root
Root has patched CVE-2026-50252 in the unbound package for Root:Debian:13. Multiple fixed versions available...
CVE-2025-0282-Full-version
Storks: Tool zur Ausnutzung von Remote Code Execution-Schwachstellen Überblick Storks ist ein Python-basiertes Proof-of-Concept PoC-Tool, das eine kritische Remote Code Execution RCE-Schwachstelle demonstriert, identifiziert als CVE-2025-0282 , in einem bestimmten Netzwerkgerät. Diese Schwachstel...
CVE-2026-77658
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...
CVE-2025-36939
Multiple vulnerabilities exist in OpenThread 's handling of MLE (Mesh Link Establishment) packets . An authenticated attacker on the same Thread network can send specially crafted packets to trigger assertion failures and a stack-based buffer overflow , resulting in a denial of service . The CNA-...
EUVD-2025-210766
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...
CVE-2025-36939
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...
gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow
A flaw was found in GStreamer. A remote attacker could exploit a heap-based buffer overflow vulnerability when parsing specially crafted MRF Multimedia Research Forum files. This vulnerability arises from insufficient validation of user-supplied data length before copying it to a heap-based buffe...
gstreamer: GStreamer: Remote code execution via heap-based buffer overflow in PNG file parsing
A flaw was found in GStreamer. This vulnerability, a heap-based buffer overflow during PNG file parsing, allows a remote attacker to execute arbitrary code. Successful exploitation requires user interaction, such as opening a malicious PNG file or visiting a specially crafted web page. The issue...
Important: Red Hat Security Advisory: gstreamer1-plugins-good security update
An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-76070
CVE-2026-76070: Netis NC63 login.cgi में बेस64-डिकोडेड पासवर्ड के माध्यम से बिना प्रमाणीकरण प्री-ऑथ स्टैक बफर ओवरफ्लो, जो RCE की ओर ले जाता है शोधकर्ता: Özcan Ersan @ozcanpng प्रकटीकरण स्थिति CVE: CVE-2026-76070 विक्रेता: Netis Systems Co., Ltd. उत्पाद: Netis NC63 Wireless AC1200 Router परीक्षित...
CVE-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...
CVE-2026-78465 Gimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit
A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...
EUVD-2026-64935
A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...
CVE-2026-78465
An integer overflow in the file-pcx plugin of GIMP affects 32-bit builds only . When a crafted PCX image file sets the number of color planes to 4 alongside sufficiently large dimensions, the memory allocation size calculation exceeds the 32-bit integer limit, producing an undersized heap buffer ...
CVE-2026-78465
A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes based on the image dimensions and the number of color planes. If a crafted file sets the number of planes to 4 alongside sufficiently larg...