176650 matches found
ROS-20261013-73-0481
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0226
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-106616: Improper Restriction of XML External Entity Reference
ColdFusion is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issu...
PT-2026-111176
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, all 19.3 versions, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to read work item contents from private groups and projects due to incorrect...
Microsoft Windows: CVE-2026-83713: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
Fortinet FortiAnalyzer Multiple Arbitrary File Read/Write via SQLi (FG-IR-26-178)
The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-178 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...
MiracleLinux 9 : perl-DBI-1.643-9.el9_8.7 (AXSA:2026-2031:07)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2031:07 advisory. perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting CVE-2026-88815 Tenable has extracted the preceding description bloc...
ALSA-2026:82280 Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU Core Utilities vulnerabilities (USN-8697-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8697-1 advisory. It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield function. A local attacker could...
UBUNTU-CVE-2026-106435
The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trailing NUL byte. An actor who can supply BSON to the documented decode or decodeall API can cause the application proce...
PT-2026-112726
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description An out-of-bounds read exists in the Remote Desktop Client, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs whe...
PT-2026-113260
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113270
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113268
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113269
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113252
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113272
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113444
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
UBUNTU-CVE-2026-107611
An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyond the palette allocation and crash the viewer by sending ZRLE-encoded tiles whose palette indices exceed the declared...
CVE-2026-103822: Out-of-bounds Read
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...