134254 matches found
Astra Linux – Vulnerability in libgd2
In the GD Graphics Library also known as LibGD, from version 2.2.5 onwards, there is a heap-based buffer over-read issue in tiffWriter within the gdtiff.c file. NOTE: The vendor states that “In my opinion, this issue should not have a CVE, since the GD and GD2 formats are documented as ‘obsolete’...
Astra Linux – Vulnerability in Chromium
In Dawn, a vulnerability was identified before version 104.0.5112.79: a remote attacker could potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the can:usb:etases58x module, the task management structure urb is correctly anchored during the read bulk callback. When submitting a task management structure urb, if the anchor pattern is used, it must be anchored before...
Astra Linux – Vulnerability in OVN
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header’s self-declared total length iptotlen for IPv4, ip6plen for IPv6, without validating it against the actual packet buffer siz...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: 9p/net: fixed improper handling of bogus negative read/write responses. In p9clientwrite and p9clientreadonce, if the server incorrectly responds with a success message but a negative write/read count, then we would consider...
Astra Linux – Vulnerability in Chromium
The use of uninitialized variables in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in libarchive
A vulnerability has been identified in the libarchive library, specifically within the archivereadformatrarseekdata function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, allowin...
Astra Linux – Vulnerability in Chromium
Before version 147.0.7727.138, read and write access in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Security Bulletin: IBM MQ .NET client is vulnerable to XML external entity injection (CVE-2026-12667)
Summary IBM MQ has addressed an XML external entity XXE vulnerability in the IBM MQ .NET client's RFH2 message parser Vulnerability Details CVEID:CVE-2026-12667 DESCRIPTION: IBM MQ could allow an authenticated attacker to read files from a vulnerable .NET client or cause limited denial of service...
CVE-2026-89180
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-89180
EFence , developed by Thinking Software Technology , contains a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands and read database contents . The vulnerability requires no user interaction and can be exploited over the network with low comp...
CVE-2026-89180 Thinking Software Technology｜EFence - SQL Injection
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-89180 Thinking Software Technology｜EFence - SQL Injection
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
EUVD-2026-77360
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
kernel: Linux kernel: Wi-Fi subsystem out-of-bounds read via crafted frames
A flaw was found in the Linux kernel's Wi-Fi subsystem cfg80211. The cfg80211iselementinherited function does not properly validate the length of extension elements. A remote attacker, by sending a specially crafted Wi-Fi frame from an Access Point AP, could trigger a one-octet slab-out-of-bounds...
kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report()
A flaw was found in the Linux kernel's Bluetooth Human Interface Device Protocol HIDP. A remote attacker, by sending specially crafted truncated packets from a paired Bluetooth device, could trigger an out-of-bounds read in the hidpinputreport function. This vulnerability may lead to unintended...
kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending a specially crafted COOKIEECHO chunk to a listening SCTP server. The server's failure to properly validate the length of a cached peer INIT chunk within...
kernel: Bluetooth: RFCOMM: validate skb length in MCC handlers
A flaw was found in the Linux kernel's Bluetooth RFCOMM Radio Frequency Communication subsystem. A malicious remote device could exploit this vulnerability by sending specially crafted, truncated Multiplexing Control Channel MCC frames. This lack of proper validation of incoming data length befor...
kernel: sctp: diag: reject stale associations in dump_one path
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostics. When performing a socket diagnostic sockdiag lookup, the system may attempt to access memory related to an SCTP association that has already been freed. This can lead to an out-of-bounds read from...
kernel: sctp: fix auth_hmacs array size in struct sctp_cookie
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. An incorrect array size calculation for the authhmacs field within the sctpcookie structure could lead to a buffer overflow. During the initialization of an SCTP association, if four HMAC identifiers...