100987 matches found
postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
A flaw was found in PostgreSQL. An object creator can exploit a stack buffer overflow vulnerability within the argument name matching component. By manipulating the OUT parameter count, an attacker can write limited arbitrary bytes 0x0 and 0x1 to server memory, which may lead to unknown impacts...
Important: Red Hat Security Advisory: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2026-108984: Stack-based Buffer Overflow
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe...
PT-2026-117697
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub 416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be...
PT-2026-118015
Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow process crash in github.com/corazawaf/coraza...
CVE-2026-76788: Out-of-bounds Write
The OSDP Control Panel reply parser cpdecoderesponse in subsys/mgmt/osdp/src/osdpcp.c decodes replies from a Peripheral Device into a stack-allocated struct osdpevent. For the REPLYKEYPPAD and REPLYRAW reply types, the payload length is taken from the received frame and the only validation...
CVE-2026-85257: Generation of Error Message Containing Sensitive Information
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...
PT-2026-117512
Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A stack buffer overflow occurs during channel connection establishment when processing TLS certificates containing malformed distinguished names. This flaw allows a remote attacker to execute...
PT-2026-117354
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...
PT-2026-117343
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...
Microsoft Office 2016 Equation Editor Memory Corruption
Microsoft Office versions 2007 SP3 through 2016 contain a stack-based buffer overflow in Equation Editor. This analysis describes the vulnerability, attack chain, patches, and mitigations...
Linux Distros Unpatched Vulnerability : CVE-2026-96956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. CVE-2026-96956 Note that Nessus relies on the...
CVE-2026-12665: Stack-based Buffer Overflow
IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...
CVE-2026-84180: Generation of Error Message Containing Sensitive Information
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...
PT-2026-118010
Mutually-referencing array formulas recurse unboundedly, causing a fatal stack overflow in github.com/xuri/excelize...
PT-2026-132891
Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow tags in decode tag. With allow tags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is...
CVE-2026-8168: Uncontrolled Recursion
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
Red Hat: CVE-2026-112898: pillow: Pillow: Information disclosure via empty palette quantization
Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize uses an empty palette. ImagingPaletteCacheUpdate leaves a local cache array uninitialized when the palette has zero entries, and the conversion path emits those bytes as...
CVE-2026-112281: Stack-based Buffer Overflow
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...
PT-2026-117651
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The OSDP Control Panel reply parser cp decode response in subsys/mgmt/osdp/src/osdp cp.c fails to properly validate the payload length for REPLY KEYPPAD and REPLY RAW reply types. An attacker...