153839 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rtbindexception from rebinding stale fnhe The packet transmission path of the sit driver calls sittunnelxmit - updateorcreatefnhe. This leads to fnheremoveoldest being called to delete entries that exceed...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323 – check for zero length in DecodeQ931. In DecodeQ931, the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to...
Astra Linux – Vulnerability in SOX
The readsamples function in hcom.c in Sound eXchange SoX 14.4.2 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted hcom file...
Astra Linux – Vulnerability in exiv2
An invalid memory address dereferencing was discovered in the Exiv2::StringValueBase::read method in value.cpp of Exiv2 0.26. This vulnerability causes a segmentation fault and results in the application crashing, leading to a denial of service...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: Fixed an issue where an OOB read was performed in the decodeint function during the CONS case. In decodeint, the CONS case calls getbitsbs, 2 to read a length value. Then, it calls getuintbs, len witho...
Astra Linux – Vulnerability in Chromium
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in krb5
In MIT Kerberos 5 also known as krb5 before version 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields...
Astra Linux – Vulnerability in libyaml-syck-perl
Versions of YAML::Syck before 1.38 for Perl have a out-of-bounds read vulnerability. The base60 sexagesimal parsing code in perlsyck.h has a buffer underflow bug in both the intbase60 and floatbase60 handlers. When processing the leftmost segment of a colon-separated value e.g., the “1” in...
Astra Linux – Vulnerability in Linux
A flaw was discovered in the Linux kernel. A use-after-free occurred in the way the console subsystem utilized ioctls KDGKBSENT and KDSKBSENT. A local user could exploit this flaw to gain access to memory beyond its intended scope. The most significant threat posed by this vulnerability is to dat...
Astra Linux – Vulnerability in libwebp
A flaw was discovered in libwebp in versions prior to 1.0.1. An out-of-bounds read was identified in the ChunkVerifyAndAssign function. The greatest threat posed by this vulnerability is related to data confidentiality and service availability...
Astra Linux – Vulnerability in Linux
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through version 5.9.13. Files drivers/tty/ttyio.c and drivers/tty/ttyjobctrl.c may allow a read-after-free attack on TIOCGSID, also known as CID-c8bcd9c5be24...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: The garbage collection process is split into two phases—unlink and reclaim. Yiming Qian reported a use-after-free issue in the pipapo set type: Under a large number of expired elements, commit-time garbag...
Astra Linux – Vulnerability in Linux 5.10
A flaw was discovered in the way the “flags” member of the new pipe buffer structure lacked proper initialization in the copypagetoiterpipe and pushpipe functions of the Linux kernel. As a result, these members could contain stale values. An unprivileged local user could exploit this flaw to writ...
Astra Linux – Vulnerability in Linux
A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...
Security Bulletin: IBM MQ .NET client is vulnerable to XML external entity injection (CVE-2026-12667)
Summary IBM MQ has addressed an XML external entity XXE vulnerability in the IBM MQ .NET client's RFH2 message parser Vulnerability Details CVEID:CVE-2026-12667 DESCRIPTION: IBM MQ could allow an authenticated attacker to read files from a vulnerable .NET client or cause limited denial of service...
CVE-2026-89180
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-89180
EFence , developed by Thinking Software Technology , contains a SQL Injection vulnerability that allows unauthenticated remote attackers to inject arbitrary SQL commands and read database contents . The vulnerability requires no user interaction and can be exploited over the network with low comp...
CVE-2026-89180 Thinking Software Technology｜EFence - SQL Injection
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2026-89180 Thinking Software Technology｜EFence - SQL Injection
EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
