101662 matches found
CVE-2026-102069 Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled
A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...
CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...
EUVD-2026-101429
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...
Security Bulletin: a vulnerability has been addressed in IBM Concert Network Observability
Summary IBM Concert Network Observability has addressed this security vulnerability with a Network Collectors update. Vulnerability Details ID:WS-2026-0062 DESCRIPTION: Unbounded mutual recursion in the TOML parser of github.com/pelletier/go-toml/v2. "unstable.Parser.parseVal" dispatches nested...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
NIFTI-Imaging NIFTI C Libraries Buffer Error Vulnerability
The NIFTI-Imaging NIFTI C libraries versions 3.0.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the function nifticonvertn2hdr2nim does not perform range checks on the NIfTI-2 dim0 value. This allows stack-based out-of-bounds reads and writes. Attacke...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
HPE NonStop SQL/MX Executor buffer error vulnerability
The HPE NonStop SQL/MX Executor T1051L40 and earlier versions contain a buffer error vulnerability caused by a stack buffer overflow. This vulnerability may lead to information disclosure or process crashes...
HPE NonStop Kernel Level Thread Model Lib buffer error vulnerability
The HPE NonStop Kernel Level Thread Model Lib T1132L01 version contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow and may lead to arbitrary code execution...
Microsoft Office Word buffer error vulnerability
Microsoft Office Word has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in Microsoft Office Word, which may allow unauthorized attackers to execute code via the network...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.27 contains a security vulnerability. This vulnerability arises from the ipv4 stack failing to verify the checksum before doing so. Packets with incorrect checksum metadata can cause skbchecksumhelp to corrupt network headers, potentially leading to privilege...
CVE-2026-109438 3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438 3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438 3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS4
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
CVE-2026-109438
Versions 0.9.7 through 1.0.1 of 3proxy are vulnerable to an uninitialized stack memory disclosure vulnerability. When the external-NAT option (-Ne) is configured, unauthenticated attackers can send a client probe that fails the SOCKS version check. This triggers a SOCKS4 reply containing uninitia...
EUVD-2026-101290
3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option -Ne is configured. Attackers can send a client probe that fail...
DEBIAN-CVE-2026-110606
LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the...
CVE-2026-110606
LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the...
DEBIAN-CVE-2026-110604
Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit REAL value followed by '.' to write a NUL byte past the 64-byte stack buffer, corrupting stack memory or crashing the...