101864 matches found
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
CVE-2026-94056
Exim before 4.100.1 is vulnerable to an information disclosure issue when Proxy-Protocol is used with an attacker-controlled proxy. The root cause is the reading of certain uninitialized data from stack memory , allowing a remote attacker to leak sensitive information. The CVSS 3.1 score is 7.5 (...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
CVE-2026-94056
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
openbabel:fuzz_convert: Stack-buffer-overflow in OpenBabel::MCDLFormat::getMCDL
Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=4620223983190016 Project: openbabel Fuzzing Engine: libFuzzer Fuzz Target: fuzzconvert Job Type: libfuzzerasanopenbabel Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address...
pentest-moodle-fiusac
Pentest Moodle FIUSAC — Divulgación de información por depurac...
Updated gstreamer1.0-plugins-base packages fix a security vulnerability
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2026-18297...
SUSE CVE-2026-89858
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound image count in qla2x00updatefruversions qla2x00updatefruversions copies the user-supplied BSG request into a fixed 256-byte stack buffer bsgDMAPOOLSIZE and then iterates list-count times over the...
SUSE CVE-2026-89984
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix kernel address leakages in LBR stack Before Arch LBR gained CPL filtering support, a user-only branch stack could still contain kernel addresses. As a result, kernel branch records may be exposed to user space...
SUSE CVE-2026-90034
In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc to kzalloc Change the kmalloc calls in usbmdc800init for irqurbbuffer and downloadurbbuffer to kzalloc, avoiding potential stack leaks if a shorter message is received in mdc800usbirq and...
SUSE CVE-2026-93119
In the Linux kernel, the following vulnerability has been resolved: usb: ljca: bound banknum in ljcaenumerategpio ljcaenumerategpio reads desc-banknum from the device and loops validpini = getunalignedle32... for i banknum. validpin holds only LJCAMAXGPIONUM / 32 = 2 entries. Two checks run befor...
SUSE CVE-2026-93127
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop scalar id on sign-extending narrowing stack fills When a spilled scalar is filled back with a sign-extending narrowing load BPFMEMSX, checkstackreadfixedoff copies the spilled register including its scalar id, but...
CLSA-2026-1789781561 openssl: Fix of 3 CVEs
CVE-2026-63074: roll back cached CMP extraCerts when a message is rejected to stop unbounded untrusted-stack growth on a long-lived ctx - CVE-2026-63076: require the CMP protectionAlg parameter to be a SEQUENCE before using it as a PBMParameter, avoiding a pointer deref - CVE-2026-75803: check...
CVE-2026-94056: Use of Uninitialized Resource
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory...
PT-2026-95900
Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description The Web Management Interface contains a stack-based buffer overflow that can be triggered remotely. The issue exists within the get css path from uri function located in the /cgi-bin/mbox-config...
PT-2026-95880
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.100.1 Description When Proxy-Protocol is used with an attacker-controlled proxy, the software allows attackers to read certain uninitialized data from stack memory. Recommendations Update to version 4.100.1 or later...
GHSA-VFJ7-8CJW-P6XM Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns
Withdrawn Advisory This advisory has been withdrawn because it's not a practically exploitable vulnerability. This link is maintained to preserve external references. Original Description braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth...
Withdrawn Advisory: braces vulnerable to stack-exhaustion denial of service through deeply nested patterns
Withdrawn Advisory This advisory has been withdrawn because it's not a practically exploitable vulnerability. This link is maintained to preserve external references. Original Description braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth...