101866 matches found
PT-2026-105542
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-99966
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-99971
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
PT-2026-134971
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...
EulerOS 2.0 SP10 : python3 (EulerOS-SA-2026-3719)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use-after-free UAF was possible in the lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile when a memory allocation fails with a...
EulerOS 2.0 SP10 : radvd (EulerOS-SA-2026-3720)
According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...
EulerOS Virtualization 2.12.0 : vim (EulerOS-SA-2026-3679)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim...
EulerOS Virtualization 2.12.1 : python3 (EulerOS-SA-2026-3609)
According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XM...
Linux Distros Unpatched Vulnerability : CVE-2026-92477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: ufs: debugfs: Reserve space for a string terminator ufssavederrwrite copies user input into a zero-initialized stack buffer and passes it to kstrtoint. A...
CVE-2026-93579: Undefined Security Weakness
A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage Return, into HTTP/2 header field values due to insufficient validation. When these values cross an HTTP/2 to HTTP/1.1 translation boundary,...
Linux Distros Unpatched Vulnerability : CVE-2026-92520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Zero queue and stack outputs on lock failure Queue and stack pop/peek helpers accept an uninitialized output buffer because the verifier expects the helper...
EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2026-3728)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits...
Linux Distros Unpatched Vulnerability : CVE-2026-90231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined ...
CVE-2026-93450: Uncontrolled Recursion
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accepting OpenAPI specifications, causing...
Tenda A18 Router DoS
The vulnerability of the setqosMiblist /goform/formSetQosBand function in the Tenda A18 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST request...
Tenda A18 Router Sub_423B50 Function DoS
The vulnerability of the sub423B50 function /goform/setMacFilterCfg of the MAC Filtering Configuration Endpoint component in the Tenda A18 microprogramming router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure ...
Tenda CX12L Wi-Fi router DoS
The vulnerability of the fromwebExcptypemanFilter function /goform/webExcptypemanFilter in the Tenda CX12L Wi-Fi router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially crafted POST reque...
Tenda FH451 Router Code Execution
The vulnerability of the formWrlExtraSet function in the Tenda FH451 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2026-95469
Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This is possible due to a stack buffer overflow, which occurs when the system processes XA...
PT-2026-99829
Multiple security vulnerabilities affect the icu package. A stack buffer overflow was found in Internationl components for unicode ICU . See references for individual vulnerability details...