107194 matches found
Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-66280)
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...
Linux Distros Unpatched Vulnerability : CVE-2026-15722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a...
The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, allows a hacker to cause a service failure.
The vulnerability of the sharkd software interface, a traffic analyzer for computer networks developed by Wireshark, is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the DataTransfer interface of Google Chrome browser allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s DataTransfer interface is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows attackers to cause a service failure.
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
The vulnerability of the Unbound DNS server, related to excessive resource consumption during the cycle, allows attackers to cause a service failure.
The vulnerability of the Unbound DNS server is related to excessive resource consumption during the cycle. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
DEBIAN-CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-17883
A flaw was found in Google Chrome's Headless mode. A remote attacker could exploit this vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to bypass the Same-Origin Policy SOP, a security mechanism that prevents web pages from interacting...
CVE-2026-65423 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-65423
The CVE concerns the open62541 library. Vulnerable: UA_Variant arrayDimensions product computation. Root cause: integer overflow that may cause an out-of-bounds write. Impact (per documents): network-accessible by remote attacker with low privileges, high impact to confidentiality, integrity, and...
CVE-2026-63559 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-63559 o6 Automation open62541 Integer Overflow or Wraparound
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information...
CVE-2026-12733
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...
CVE-2026-15978
SGLang (vaguely referenced in CVE-2026-15978) contains a model weight exfiltration vulnerability that is exploitable when no API keys are configured. The vulnerability arises because SGLang exposes two endpoints that can trigger distributed weight broadcasting via NCCL and then data transfer, all...
EUVD-2026-51266
SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...
CVE-2026-15978 CVE-2026-15978
SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...
CVE-2026-12733 IBM DataPower Gateway affected by denial of service
IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations...