CVE-2026-65147

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service...

CVE-2026-65147

NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure and denial of service...

CVE-2026-65147

The NVIDIA DALI library is susceptible to an uncontrolled out-of-bounds read vulnerability (CWE-125 ). A successful exploit could allow an attacker to cause information disclosure and a denial of service . Specific details regarding the affected versions, root cause, or remediation are not provid...

Security Bulletin:A vulnerability in libssh affects IBM SAN Volume Controller, IBM Storage Virtualize and IBM FlashSystem products

Summary A vulnerability in libssh affects IBM Storage Virtualize products and could result in a confidentiality impact. CVE-2025-5318. Vulnerability Details CVEID:CVE-2025-5318 DESCRIPTION: A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered...

RLSA-2026:80663 Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

tftp security update

An update is available for tftp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Trivial File Transfer Protocol TFTP is typically used only for booting...

emacs security update

An update is available for emacs. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provide...

RLSA-2026:80507 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

emacs security update

An update is available for emacs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNU Emacs is a powerful, customizable, self-documenting text editor. It provide...

RLSA-2026:80506 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Heap over-read leading to information disclosure via crafted image CVE-2026-772...

CVE-2026-109253

A flaw was found in FreeRDP. When processing authentication data for Remote Credential Guard, the client checks data lengths before accounting for byte alignment padding. A malicious or compromised Remote Desktop Protocol RDP server can exploit this flaw by sending a crafted payload to a connecte...

CVE-2026-109249

A flaw was found in FreeRDP. An out-of-bounds read vulnerability in the Remote Assistance file parser allows an attacker to cause a Denial of Service DoS. By convincing a user to open a specially crafted Remote Assistance invitation file, the application mishandles memory bounds while processing...

CVE-2026-109248

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a heap out-of-bounds read by returning a specially crafted response during clipboard operations. When a user attempts to paste files copied from the remote session into a local application, improper handling o...

CVE-2025-30208

CVE-2025-30208 !IMPORTANT Disclaimer This exploit is for educational and ethical security testing purposes only. The use of this exploit against targets without prior mutual consent is illegal, and the developer disclaims any liability for misuse or damage caused by this exploit. Installation git...

CVE-2026-109854

A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the stack. If the application exposes or returns the decoded output, this flaw can result in unexpected behavior and...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102073

A vulnerability exists in multiple APOGEE and TALON products, including APOGEE MBC (PPC), MEC (PPC), PXC Compact, PXC Modular, and TALON TC Compact/Modular across various BACnet and P2 Ethernet configurations. The root cause is an integer underflow (CWE-191) where the web service fails to properl...

CVE-2026-89208

Several Siemens products are vulnerable to a memory corruption issue due to improper input bounds validation when accessing packet data. Affected systems include Capital Embedded AR Classic (various versions), Desigo PXC models (e.g., PXC00-E.D, PXC100-E.D, PXC200-E.D, PXC64-U), and Desigo PXM20-...

CVE-2026-63350

Affected devices fail to properly restrict executable content within imported trace files, leading to a CWE-95 (Eval Injection) vulnerability. An attacker could socially engineer an authorized user with "Read diagnostics" rights into importing a specially crafted trace file . Successful exploitat...