CVE-2026-4742

Concretely, CVE-2026-4742 affects visualfc/liteide prior to x38.4, with the vulnerability located in http_parser.C within liteidex/src/3rdparty/qjsonrpc/src/http-parser modules. The issue is described as an inconsistent interpretation of HTTP requests that enables HTTP Request/Response Smuggling....

Reachable Assertion

Overview Affected versions of this package are vulnerable to Reachable Assertion via the TYParseNamespace function in parser.c, by providing crafted input to this function during local processing. Remediation There is no fixed version for tidy-html5. References - GitHub Issue - Vulnerable Code...

AZL-43423 CVE-2024-41184 affecting package keepalived for versions less than 2.3.1-1

In the vrrpipsetshandler handler fglobalparser.c of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be worthwhile because an empty ipset name must be configured by the user...

GNU cflow 资源管理错误漏洞

GNU cflow is a flowchart generator for the GNU community that reads C source files and generates externally referenced flowcharts. A resource management error vulnerability exists in cflow version 1.6, which stems from the existence of a post-release use of the callchar name, int line function in...

yaml-cpp: Denial of service

Background yaml-cpp is a YAML parser and emitter in C++. Description The function Scanner::peek in scanner.cpp may have an assertion failure. Impact An attacker could cause a possible Denial of Service condition. Workaround There is no known workaround at this time. Resolution All yaml-cpp users...

GNU Recutils memory leak vulnerability (CNVD-2019-22425)

GNU Recutils is a set of tools and libraries for accessing human-editable plain text databases called recfiles. A memory leak vulnerability exists in recbufnew in rec-buf.c in GNU Recutils 1.8 when called from recparserset in rec-parser.c in librec.a. The vulnerability is caused by the following...

The vulnerability of the Ubuntu operating system, which allows a hacker to trigger a service failure

The vulnerability of the Ubuntu operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure by using specially crafted XML data in the functions xmlParseEntityDecl or xmlParseConditionalSections in parser.c...