CVE-2024-58381 PocketMine-MP before 5.11.1 Denial of Service via LoginPacket

PocketMine-MP before 5.11.1 contains a denial of service vulnerability in LoginPacket JSON processing that allows remote attackers to crash the server by sending malformed JSON data. Attackers can exploit improper object initialization from scalar JSON types to trigger unset required properties,...

CVE-2024-58381

PocketMine-MP before 5.11.1 is vulnerable to a denial of service in its LoginPacket JSON processing . A remote attacker can crash the server by sending malformed JSON data, exploiting improper object initialization from scalar JSON types that triggers unset required properties. The vulnerability ...

Vulnerabilities in Adobe Photoshop Desktop applications

Adobe has identified several vulnerabilities in Adobe Photoshop Desktop. These vulnerabilities reside in the processing of specially crafted files within Adobe Photoshop Desktop. They include out-of-bounds write attacks, integer overflow or wraparound attacks, uncontrolled search path elements, a...

Vulnerabilities found in various SAP products

SAP has identified vulnerabilities in the SAP Extended Passport Protocol EPP processing library, SAP NetWeaver Message Server, the @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools for SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web...

RLSA-2026:64796 Important: valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

valkey security, bug fix, and enhancement update

An update is available for valkey. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Valkey is an advanced key-value store. It is often referred to as a data...

valkey security, bug fix, and enhancement update

An update is available for valkey. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Valkey is an advanced key-value store. It is often referred to as a data...

RLSA-2026:64807 Important: valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...

Improper Preservation Of Message Metadata

Spring Integration is vulnerable to improper preservation of message metadata. The vulnerability is due to reply and propagated headers being copied from the most recently consumed upstream message when .fluxTransform processes raw payloads asynchronously or out of order, which allows an attacker...

CVE-2026-86547

mruby-c (mrubyc) through 4.0.0 contains a null pointer dereference in the op_enter() handler in src/vm.c when processing untrusted bytecode. An attacker can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application, resulting in denial of s...

CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

Improper Handling Of Untrusted Message Headers

Spring Integration is vulnerable to improper handling of untrusted message headers. The vulnerability is due to the EmbeddedHeadersJsonMessageMapper deserializing embedded JSON headers into a Map and creating message headers without sanitizing or filtering untrusted header names by default, which...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...

CVE-2026-87636

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

ROS-20260909-73-0176

The vulnerability of the Skia component in the Google Chrome web browser is related to errors in HTTP requests processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of the JSON processing library and stream-json, related to algorithmic complexity, allows attackers to cause service failures.

The vulnerability of the JSON processing library and stream-json is related to algorithmic complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

RockyLinux 10 : valkey (RLSA-2026:64796)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64796 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 valkey: Valkey: Remote code execution via use-after-free in...