25190 matches found
CVE-2026-81634
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...
CVE-2026-81634
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...
CVE-2026-89186
ZenHive mpp (Elixir plug library) is vulnerable to sensitive information disclosure via shared HTTP caches . The MPP.Plug.verify_credential plug sets cache-control: private and a Payment-Receipt header before the wrapped application executes, but registers no register_before_send/2 callback to en...
kernel: Kernel: Remote out-of-bounds write in RDMA/siw
A flaw was found in the Linux kernel's Soft iWARP siw driver. A remote attacker, by sending specially crafted Read Response segments that exceed the requested length, can trigger an out-of-bounds write. This vulnerability can lead to memory corruption, potentially causing a kernel crash or...
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...
CVE-2026-87113: Authorization Bypass Through User-Controlled Key
Tanium addressed an improper access controls vulnerability in Threat Response...
Mozilla Thunderbird < 153.3
The version of Thunderbird installed on the remote Windows host is prior to 153.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-96 advisory. - Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 156, Firefox ES...
PT-2026-93939
Tanium addressed an improper access controls vulnerability in Threat Response...
CVE-2026-87105: Improper Neutralization of Special Elements used in an SQL Command
Tanium addressed a SQL injection vulnerability in Threat Response...
PT-2026-93936
Tanium addressed an improper access controls vulnerability in Threat Response...
PT-2026-93940
Tanium addressed a server-side request forgery vulnerability in Threat Response...
CVE-2026-87116: Server-Side Request Forgery (SSRF)
Tanium addressed a server-side request forgery vulnerability in Threat Response...
PT-2026-93938
Tanium addressed a SQL injection vulnerability in Threat Response...
CVE-2026-87026: Missing Authorization
Tanium addressed an improper access controls vulnerability in Threat Response...
Linux Distros Unpatched Vulnerability : CVE-2026-92240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged ' ID' response, crashing Thunderbird...
CVE-2026-88592
kkFileView = 4.2.0 is vulnerable to Server-Side Request Forgery SSRF. The cross-origin file proxy endpoint /getCorsFile is protected by TrustHostFilter against the trust.host whitelist. However, the URL parameter validated by the filter is not the same parameter the controller actually fetches: t...
PT-2026-93849
Name of the Vulnerable Software and Affected Versions oras-go versions prior to 2.6.2 Description The parseLink function in registry/remote/utils.go fails to validate the scheme, host, or port of absolute URLs provided in the Link response header from a registry. This allows a malicious registry ...
CVE-2026-88592
The software kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF) via the cross-origin file proxy endpoint /getCorsFile. The root cause is a validation discrepancy: the TrustHostFilter validates the first non-empty parameter in a fixed priority order, but the controller spec...
CVE-2026-81634: Heap-based Buffer Overflow
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by missing to add the first owner name into the buffer length check. A malicious actor operating a...