100758 matches found
PT-2026-87272
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to ...
EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3281)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...
NewStart CGSL MAIN 7.02 : xpdf Multiple Vulnerabilities (NS-SA-2026-0109)
The remote NewStart CGSL host, running version MAIN 7.02, has xpdf packages installed that are affected by multiple vulnerabilities: - In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes ...
NewStart CGSL MAIN 7.02 : openssl Multiple Vulnerabilities (NS-SA-2026-0112)
The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by multiple vulnerabilities: - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may...
EulerOS 2.0 SP12 : python-sphinx (EulerOS-SA-2026-3303)
According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...
EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-3383)
According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...
EulerOS 2.0 SP12 : vim (EulerOS-SA-2026-3318)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the...
EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3320)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...
Security update for aws-nitro-enclaves-cli (important)
openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21782-1 Rating: important References: bsc1257933 bsc1270202 bsc1274300 Cross-References: CVE-2026-25541 CVE-2026-25727 CVE-2026-4167...
VulnCheck KEV: CVE-2026-81963
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...
CVE-2026-86514: Stack-based Buffer Overflow
A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...
PT-2026-87915
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
CVE-2026-85384: Stack-based Buffer Overflow
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
CVE-2026-9216: Stack-based Buffer Overflow
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
CVE-2026-81963: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81388: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81396: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-73006: Stack-based Buffer Overflow
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...