39161 matches found
CVE-2026-40345
deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and deepmergeIntoCustom APIs do not track visited objects or object pairs when recursively merging records. When two input values...
CVE-2026-18303
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...
MINI-QVR2-Q3JQ-P23J
Bulletin has no description...
CVE-2026-40345
deepmerge-ts
CVE-2026-18303 GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...
CVE-2026-18303
GIMP (GNU Image Manipulation Program) is affected by a stack-based buffer overflow in its TIF file parser . The root cause is insufficient validation of user-supplied data length before copying it to a stack-based buffer, allowing a remote attacker to achieve arbitrary code execution in the conte...
protobufjs: protobufjs: Denial of Service via crafted JSON descriptors
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the...
MINI-294G-8MVQ-VJJR
Bulletin has no description...
OESA-2026-3456 cpio security update
GNU cpio copies files into or out of a cpio or tar archive. The archive can be another file on the disk, a magnetic tape, or a pipe. Security Fixes: GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the...
OESA-2026-3418 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
CVE-2026-19582
...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
GO-2026-6185 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-JR6H-R7VG-F9MC vulnerabilities
Vulnerabilities for packages: druid...
GHSA-J3RV-75WM-77RM vulnerabilities
Vulnerabilities for packages: binutils...
PT-2026-83655
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarily bracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
PT-2026-79102
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub 44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptest channel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit h...
PT-2026-79234
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote authenticated attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a...
PT-2026-79224
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...