101072 matches found
CVE-2026-8168: Uncontrolled Recursion
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
CVE-2026-112281: Stack-based Buffer Overflow
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoderhandlecsi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and over...
CVE-2026-105810: Stack-based Buffer Overflow
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...
CVE-2026-110673: Uncontrolled Recursion
Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...
PT-2026-117390
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
PT-2026-117697
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub 416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be...
Linux Distros Unpatched Vulnerability : CVE-2026-112063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer...
RHEL 7 : postgresql (RHSA-2026:84585)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:84585 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Arbitrary code executi...
PT-2026-117685
Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description Pillow can disclose uninitialized stack memory when the Image.quantize function uses an empty palette. This occurs because the ImagingPaletteCacheUpdate function leaves a local cache array...
Linux Distros Unpatched Vulnerability : CVE-2026-96956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. CVE-2026-96956 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-98528
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpiodesctolineinfo, we return immediately before...
Linux Distros Unpatched Vulnerability : CVE-2026-8168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash...
CVE-2026-112368: Uncontrolled Recursion
An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...
PT-2026-117425
libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder handle csi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and ov...
PT-2026-117473
Name of the Vulnerable Software and Affected Versions MongoDB PHP driver affected versions not specified Description An uncontrolled recursion weakness exists in the BSON decoding logic. An unauthenticated party can supply crafted binary document data to the decoder to exhaust the process stack...
PT-2026-117571
Name of the Vulnerable Software and Affected Versions Cpanel::JSON::XS versions prior to 4.80 Description An issue exists in the decode tag function where the use of allow tags enables stack exhaustion through nested tagged values. When allow tags is active, the character "" initiates a tagged...
PT-2026-117651
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The OSDP Control Panel reply parser cp decode response in subsys/mgmt/osdp/src/osdp cp.c fails to properly validate the payload length for REPLY KEYPPAD and REPLY RAW reply types. An attacker...
PT-2026-117537
Name of the Vulnerable Software and Affected Versions Tapo C320WS V2.0 Description An authenticated stack-based buffer overflow exists in the local onboarding Wi-Fi configuration path. An attacker on the adjacent network can submit a crafted request containing an oversized encrypted password fiel...
PT-2026-117512
Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A stack buffer overflow occurs during channel connection establishment when processing TLS certificates containing malformed distinguished names. This flaw allows a remote attacker to execute...