91285 matches found
CVE-2026-88408
FalkorDB (a Redis graph database module) versions v4.20.1 through v4.20.4 are affected by a stack overflow in the _GetGroup() function within /ops/op_aggregate.c. An authenticated, remote attacker can trigger a Denial of Service by sending a crafted input to the affected function. The NVD-assesse...
CVE-2026-79919: Protection Mechanism Failure
MaxKB is an open-source AI assistant for enterprise. Prior to version 2.10.6-lts, function-library code running under the LDPRELOAD sandbox can invoke ctypes.CDLL from an importlib.abc.MetaPathFinder callback so the dlopen call-stack heuristic sees a Python import frame, then use unhooked dlsym...
CVE-2026-65651: Uncontrolled Recursion
temporalio/sqlparser accepts SQL containing deeply nested unary expressions and can return a correspondingly deep abstract syntax tree without enforcing an applicable nesting limit. The library's String and Walk operations recursively traverse that tree. An application that parses...
CVE-2026-88408
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Linux Distros Unpatched Vulnerability : CVE-2026-54634
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld sendraw command on TCP port 4532 reaches...
PT-2026-96080
Name of the Vulnerable Software and Affected Versions Neethi versions prior to 3.2.4 Description A specially crafted WS-Policy document containing deeply nested policy elements can bypass the nesting-depth limit. This leads to thread stack exhaustion, which crashes the parser and results in a...
The vulnerability of the digest_final() function in the openssl/src/md_ctx.rs module of the OpenSSL library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the digestfinal function in the openssl/src/mdctx.rs module of the OpenSSL library is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-3874)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...
PT-2026-96292
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/op aggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2026-3840)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...
CVE-2026-88406
FalkorDB (a Redis graph database module), versions v4.20.1 through v4.20.4 , is affected by a stack overflow in the _ValidateUnion_Clauses function located in /ast/ast_validations.c. The flaw allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) by sending a crafted input...
CVE-2026-88406
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88406: Stack-based Buffer Overflow
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
SUSE SLES12 Security Update : rpcbind (SUSE-SU-2026:4075-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4075-1 advisory. This update for rpcbind fixes the following issue: - CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump short-mode version-list...
PT-2026-96244
A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...
CVE-2026-59168: Uncontrolled Recursion
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/jsonreader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, recurse once per input nesting level without a depth guard...
PT-2026-96290
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnion Clauses function /ast/ast validations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-93433: Stack-based Buffer Overflow
A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI Small Computer System Interface Vital Product Data VPD page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack...
PT-2026-96074
Name of the Vulnerable Software and Affected Versions temporalio/sqlparser affected versions not specified Temporal Server affected versions not specified Description The temporalio/sqlparser library allows SQL containing deeply nested unary expressions, resulting in a deep abstract syntax tree...
CVE-2026-88406
FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...