29387 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-94284
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read vulnerability in libX11's XIM trigger-key registration parser in libX11 before 1.8.14 could be used by malicious X servers to crash attach...
PT-2026-99763
Name of the Vulnerable Software and Affected Versions Eyeplus version 57.0.0.0308 Description A remote stack-based buffer overflow exists within the p2pcam HTTP Parser component. This issue occurs when an unknown function fails to properly handle input, allowing a remote attacker to trigger the...
CLSA-2026-1790544295 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.4-tuxcare.1...
DEBIAN-CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
UBUNTU-CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CLSA-2026-1790541942 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.5-tuxcare.1...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
EUVD-2026-88015
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
CVE-2026-96280
The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...
[SECURITY] [DSA 6521-1] ruby-oj security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6521-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 27, 2026 https://www.debian.org/security/faq -...
CLSA-2026-1790520930 TuxCare security update for body-parser (1 CVE)
TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.3-tuxcare.1...
CVE-2026-82333
A flaw was found in Multer, a Node.js middleware for handling multipart/form-data. A remote attacker can send a specially crafted multipart request containing oversized array indices in field names. This can cause Multer's field parser to synchronously iterate a maximum-length sparse array, which...
RUSTSEC-2026-0311 Stack overflow on deeply nested LaTeX input
The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...
Stack overflow on deeply nested LaTeX input
The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...
CVE-2026-100740
A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...
CVE-2026-100740 D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write
A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...
CVE-2026-100740
The D-Link DIR-895L router, running firmware A1_102b07 , contains an out-of-bounds write (CWE-787 / CWE-119) vulnerability in the L2TP Control Channel Parser within the tunnel.c file. Specifically, the tunnel_set_params() function fails to properly handle the Host Name AVP ; while the length is c...
EUVD-2026-87816
A vulnerability was detected in D-Link DIR-895L A1102b07. Impacted is the function tunnelsetparams of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may b...