112957 matches found
CVE-2026-87117
NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
EUVD-2026-91399
NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...
SUSE-SU-2026:4419-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...
httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference
A flaw was found in the modheartmonitor module of the Apache HTTP Server. A remote, unauthenticated attacker can exploit a NULL pointer dereference vulnerability when the module is configured with a unicast listener. By sending specially crafted network traffic to the listening service, an attack...
httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc
A flaw was found in the modxml2enc module of the Apache HTTP Server. An untrusted backend server can cause a Denial of Service DoS by returning a crafted response with a character set whose conversion partially succeeds and then fails. Processing this response triggers an invalid memory access nu...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...
SUSE-SU-2026:4413-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...
SUSE-SU-2026:4412-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...
MGASA-2026-0465 Updated wireshark package fixes security vulnerabilities
Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...
Updated wireshark package fixes security vulnerabilities
Loop with Unreachable Exit Condition 'Infinite Loop' in Wireshark. CVE-2026-15163 Heap-based Buffer Overflow in ciscodump. CVE-2026-15164 Heap-based Buffer Overflow in Wireshark. CVE-2026-15165 Stack-based Buffer Overflow in Wireshark. CVE-2026-15166 Stack-based Buffer Overflow in Wireshark...
CLSA-2026-1790584773 nginx: Fix of 5 CVEs
CVE-2026-27651: properly clear s-passwd in mail auth http requests to fix a null pointer dereference on CRAM-MD5/APOP retry - CVE-2026-27654: validate the Destination length for Dav COPY and MOVE to prevent an integer underflow and heap buffer overwrite when alias is used - CVE-2026-27654: also...
CLSA-2026-1790593993 Fix of 5 CVEs
SECURITY UPDATE: NULL pointer dereference in ngxmailauthhttpmodule when a CRAM-MD5 or APOP authentication attempt is retried - debian/patches/CVE-2026-27651.patch: clear s-passwd with ngxstrnull in ngxmailauthhttpcreaterequest, so the stale length no longer survives into the next auth attempt and...
CVE-2026-63686
A flaw was found in the modxml2enc module of the Apache HTTP Server. An untrusted backend server can cause a Denial of Service DoS by returning a crafted response with a character set whose conversion partially succeeds and then fails. Processing this response triggers an invalid memory access nu...
CVE-2026-46729
A flaw was found in the modheartmonitor module of the Apache HTTP Server. A remote, unauthenticated attacker can exploit a NULL pointer dereference vulnerability when the module is configured with a unicast listener. By sending specially crafted network traffic to the listening service, an attack...
EUVD-2026-91136
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...
CVE-2026-103764
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...
SUSE CVE-2026-19445
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...