PT-2026-91461

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow affected versions not specified Description Programming model artifacts in both containerized and traditional deployments may be susceptible to XML Entity Injection attacks by default. This occurs when an...

[SECURITY] Fedora 45 Update: chirp-0.4.0^20260828-1.fc45

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

CVE-2026-82079

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-82079 Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

CVE-2026-82079

A stack-based buffer overflow in the Nintendo Switch local wireless networking functionality allows an attacker within wireless range to execute arbitrary code via return-oriented programming (ROP) using crafted network traffic. The vulnerability affects Nintendo Switch firmware before 23.0.0 , w...

EUVD-2026-75252

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming ROP through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0...

PT-2026-89278

Name of the Vulnerable Software and Affected Versions Nintendo Switch versions prior to 23.0.0 Description A stack-based buffer overflow exists in the local wireless networking functionality. An attacker within wireless range can execute arbitrary code using return-oriented programming ROP by...

[SECURITY] Fedora 43 Update: chirp-0.4.0^20260828-1.fc43

Chirp is a tool for programming two-way radio equipment It provides a generic user interface to the programming data and process that can drive many radio models under the hood...

ROS-20260831-73-0007

The vulnerability of the HTTP/2 implementation in the Go programming language is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

CVE-2026-79769

A flaw was found in Nokogiri. This vulnerability involves a possible invalid memory read in the internal Nodeinitializecopywithargs helper. If application code calls this protected method with an incorrect argument type, such as a non-Node object, it can lead to an out-of-bounds read, causing the...

SUSE CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

CVE-2026-79769

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

EUVD-2026-65527

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

CVE-2026-79769: Access of Resource Using Incompatible Type

Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...

PT-2026-81358

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.19.4 Description An invalid out-of-bounds memory read exists in the protected internal Nodeinitialize copy with args helper, which is utilized by Nodedup and clone. The issue occurs because the helper unwraps its...

The vulnerability of the Close() function in the Go programming language, which allows a hacker to trigger a service failure

The vulnerability of the Close function in the Go programming language is related to the operation of writing data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-64607 vulnerabilities

Vulnerabilities for packages: wavefront-proxy, logstash, wso2is, cloudwatch-exporter, dependency-track-apiserver, airbyte-platform, thingsboard, apache-hop, zipkin, druid, nuxeo, airbyte-platform-fips, conductor, kserve-modelmesh, wazuh-indexer, apache-polaris-fips, commercial-elasticsearch,...

MINI-2XQP-2P4C-J3MM

Bulletin has no description...

GO-2026-4803 vulnerabilities

Vulnerabilities for packages: minio...

EUVD-2026-54730

The Newsletters WordPress plugin before 4.16 does not strictly compare its API authentication key, allowing unauthenticated attackers to bypass the API authentication via type juggling and perform privileged actions such as modifying subscriber records and sending emails, when the optional API ha...