12711 matches found
curl: curl: Information disclosure due to secure cookie attribute bypass
A flaw was found in curl. When a Set-Cookie: header uses a tab character instead of a space before the Secure attribute, curl incorrectly stores the cookie without the Secure flag. This can lead to information disclosure, as the cookie may then be sent over unencrypted HTTP connections to the sam...
curl: libcurl: Information disclosure via improper Public Suffix List boundary check
A flaw was found in libcurl when libpsl support is enabled. A remote attacker could exploit this vulnerability by setting a Set-Cookie header with a Domain attribute that explicitly matches a public suffix. This improper handling causes libcurl to save the cookie with a wildcard domain scope,...
Linux Distros Unpatched Vulnerability : CVE-2026-55858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector...
CVE-2026-55858
A flaw was found in MariaDB Connector/J, a component used to connect Java applications to MariaDB and MySQL databases. The connector incorrectly assumes a UTF-8 character set for communication, even if the database server changes its client character set to a non-UTF-8 value during a session. Thi...
kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...
kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...
SUSE CVE-2026-72434
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, canceldelayedworksync was called while gc calls queuedelayedwork unconditionally which can lead not to properly shutting down the gc...
CURL-CVE-2026-80255 secure cookie attribute bypass with tab
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
domain-scoped PSL domain cookie
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
secure cookie attribute bypass with tab
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
PT-2026-84657
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A flaw exists where using a horizontal tab ASCII code 9 instead of a space ASCII code 32 immediately before the Secure attribute in a Set-Cookie: header causes the software to store the cookie...
PT-2026-84659
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description When libpsl support is enabled, the software fails to enforce the Public Suffix List boundary check while processing a Set-Cookie header. This occurs when the Domain attribute explicitly matches...
SUSE CVE-2026-59879
Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Listset, ListsetSize, ListsetIn, ListupdateIn, and the functional set, setIn, and updateIn mishandle an index or size in the range 2 30 to 2 31 in setListBounds in src/List.js, causing an empty List to ente...
wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption
A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...
wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption
A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...
wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption
A flaw was found in GNU Wget. A remote attacker can exploit a heap buffer overflow vulnerability in the convertfname function. This occurs when processing a server-supplied filename that requires character set conversion, leading to memory corruption due to incorrect buffer reallocation. This can...
CLSA-2026-1788270306 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz: DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS...
Malicious code in actions-set-env-vars (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
CLSA-2026-1788163557 Fix CVE(s): CVE-2026-14669
SECURITY UPDATE: Heap buffer overflow in tochartimestamptz: DCHtochar copies the timezone abbreviation into a DCHMAXITEMSIZ-budgeted workspace with an unchecked strcpy, and any client can select a longer POSIX abbreviation via SET TIME ZONE CVSS 8.8, arbitrary code execution as the database OS us...
Unity Linux 20.1070e Security Update: mariadb-connector-c (UTSA-2026-104942)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104942 advisory. MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with...