30462 matches found
BIT-PYTHON-MIN-2026-15308 Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
BIT-PYTHON-2026-15308 Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
BIT-LIBPYTHON-2026-15308 Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
The incremental HTML parser html.parser.HTMLParser allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data...
Security update for python313
This update for python313 fixes the following issues: CVE-2025-15366: user-controlled command can allow additional commands injected using newlines bsc1257044. CVE-2025-15367: control characters may allow the injection of additional commands bsc1257041. CVE-2026-0864: improper handling of...
PT-2026-96859
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.13.3-tuxcare.2...
PT-2026-78846
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.4.0 through 4.4.18 Wireshark versions 4.6.0 through 4.6.7 Description A crash occurs in the Tektronix K12xx file parser, which can lead to a denial of service. Recommendations Update Wireshark versions 4.4.0 through 4.4.18...
CVE-2026-50719
The Ingenic T41, and probably also T32, T40, and A1 SoC boot ROMs parse and execute an attacker-controlled init table from the SPL header before checking the secure boot state and before invoking signature verification. The init table parser supports full-address 32-bit write operations, allowing...
PT-2026-78845
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A buffer over-read in the ERF file parser can lead to a crash, resulting in a denial of service. Recommendations At the moment, there is no information...
PT-2026-78601
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow in the IPv4 IP-options parser allows a remote attacker to obtain sensitive information. An integer underflow occurs when an arithmetic operation results...
PT-2026-78863
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description An abnormal exit in the BUSMASTER file parser allows a denial of service. Recommendations At the moment, there is no information about a newer version...
PT-2026-96860
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.8.4-tuxcare.3...
PT-2026-96861
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.3...
PT-2026-96862
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.19.0-tuxcare.2...
Link content parser - Critical - Unsupported - SA-CONTRIB-2026-101
The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, read the documentation on becoming the maintainer of a project that is unsupported for security reasons...
CVE-2026-76883: Heap-based Buffer Overflow
Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76884: Buffer Over-read
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76885: Buffer Over-read
Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-16839: Out-of-bounds Read
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...
PT-2026-80792
Name of the Vulnerable Software and Affected Versions Drupal Link content parser affected versions not specified Description A security issue exists within the Drupal Link content parser. Recommendations At the moment, there is no information about a newer version that contains a fix for this...