98792 matches found
CVE-2026-92933
vm2 (a Node.js sandbox for untrusted code) in versions ≤ 3.11.7 leaks host-process information to sandboxed code. The root cause is that NodeVM exposes the host util module as an unfiltered shallow copy via defaultBuiltinLoaderUtil, and the deprecated sys builtin (an alias of util) through the ge...
CVE-2026-92933
vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code "util.getCallSites", a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals a...
CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites
vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...
CVE-2026-92933 vm2 before 3.11.8 Information Disclosure via util.getCallSites
vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-90823
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
EUVD-2026-81465
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-81480
Dell OpenManage Server Administrator (OMSA) , versions prior to 11.1.0.3 , contains a Stack-based Buffer Overflow vulnerability. A high-privileged attacker with remote network access can potentially exploit it to achieve code execution , resulting in high impact to confidentiality, integrity, and...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-90823
FatPipe MPVPN, WARP, and IPVPN appliances running end-of-life firmware 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker who can reach the management interface can submit a crafted authentication request that triggers an unchecked ...
EUVD-2026-81463
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...
github.com/go-openapi/swag: go-openapi/swag: Denial of Service via uncontrolled JSON recursion
A flaw was found in the go-openapi/swag library's jsonutils component. This vulnerability, caused by uncontrolled recursion during ordered JSON JavaScript Object Notation parsing and serialization, allows remote unauthenticated attackers to submit deeply nested JSON documents. This can lead to a...
SUSE-SU-2026:23873-1 Security update for jq
This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in decNumberToString bsc1218034. - CVE-2023-50268: stack-based buffer overflow ...
SUSE-SU-2026:23746-1 Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem bsc1278722. - CVE-2026-85506: Arbitrary code execution via...
K000163155: Python vulnerability CVE-2026-4224
Security Advisory Description When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. CVE-2026-4224 Impact There is no impact; F5 products are not affected by this vulnerability. Securi...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...