101049 matches found
HMS Networks PEAK-System Device Driver Setup input validation error vulnerability
Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain an input validation error vulnerability. This vulnerability arises because the PCAN parser utilizes a DLC index length table controlled by...
Exploit for CVE-2024-58299
Description This pull request addresses a security vulnerabil...
CVE-2026-112368
The MongoDB PHP driver contains an uncontrolled recursion weakness (CWE-674) within its BSON decoding logic, specifically in the phongo_bson_visit_document/visit_array functions. An unauthenticated attacker can provide crafted binary document data to the decoder to exhaust the process stack. This...
CVE-2026-112368 Unbounded Recursion in phongo_bson_visit_document/visit_array:
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...
EUVD-2026-104414
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...
CVE-2026-112368
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...
Unbounded Recursion in phongo_bson_visit_document/visit_array:
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...
Security update for python3, python3-base, python3-doc
This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer...
SUSE-SU-2026:4744-1 Security update for python3, python3-base, python3-doc
This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffe...
Security update for python36
This update for python36 fixes the following issues: Security issues fixed: CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429...
SUSE-SU-2026:4743-1 Security update for python36
This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. - CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429. -...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure via the checkFailure function in the CXF SOAP consumer. An external caller can read internal class and package names and exception messages by sending a SOAP request that triggers an undeclared route failure; if CXF...
AZL-110127 CVE-2026-8168 affecting package qtsvg 6.6.1-3
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
CVE-2026-8168
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
DEBIAN-CVE-2026-8168
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
CVE-2026-112281
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...
CVE-2026-112281
The libaribb24 (aribb24) library, through version 1.0.3 , is vulnerable to a stack-based buffer overflow in the decoder_handle_csi() function located in src/decoder.c. The root cause is the handling of unbounded CSI parameter bytes, which allows an attacker to write past a fixed 256-entry array. ...
EUVD-2026-104292
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...
CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...
CVE-2026-112281 libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...