77811 matches found
CVE-2026-69519 Azure Stack HCI Information Disclosure Vulnerability
...
CVE-2026-69519
Azure Stack HCI has an observable response discrepancy vulnerability allowing an unauthenticated remote attacker to disclose sensitive information over the network. CVSS 3.1 scores it HIGH (8.6) with network attack vector and no privileges required. No patch version or exploitation details are pr...
CVE-2026-16945 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-16945
CVE-2026-16945 is a stack-based buffer overflow in IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 that allows a local attacker with low privileges to execute arbitrary code. The CVSS 3.1 score is 7.8 (HIGH) with full impact on confidentiality, integrity, and availability. No user interaction is requir...
CVE-2026-16944 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...
CVE-2026-16944
CVE-2026-16944 affects IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 , where a stack-based buffer overflow allows a local attacker to execute arbitrary code. NVD assigns a CVSS 3.1 score of 7.8 (HIGH) with low privileges required, while IBM rates it 6.7 (MEDIUM) requiring high privileges. The CISA...
CVE-2026-43798
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...
CVE-2026-43798
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...
CVE-2026-43798
CVE-2026-43798 affects swift-nio-ssh , the SSH implementation in Apple's Swift NIO networking library. A single crafted SSH message allows an unauthenticated network attacker to trigger an out-of-bounds stack write with attacker-controlled length and content, potentially affecting any application...
CVE-2026-73040 Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion
Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate, which requires the name to match ^a-z0-9-+$, is reached from save alone, while the path getter returns path.jointhis.server.stacksDir, this.name and Stack.getStack builds...
CVE-2026-77148
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has...
Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
GHSA-JGVR-6X5W-HX5W Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service
Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarilybracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...
DEBIAN-CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...
CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...
EUVD-2026-63573
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has...
CVE-2026-77148
A stack-based buffer overflow was identified in the Web Management component of Comfast CF-N1-S firmware 2.6.0.1 . The vulnerable function is sub_44B50C within the endpoint /cgi-bin/mbox-config?method=SET§ion=ptest_channel. The flaw allows a remote attacker with low privileges to trigger the ...
CVE-2026-77148 Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow
A vulnerability was found in Comfast CF-N1-S 2.6.0.1. This impacts the function sub44B50C of the file /cgi-bin/mbox-config?method=SET§ion=ptestchannel of the component Web Management. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. The exploit has...
EUVD-2026-63508
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...