101925 matches found
CVE-2026-90823
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
EUVD-2026-81465
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-81480
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2026-81480
Dell OpenManage Server Administrator (OMSA) , versions prior to 11.1.0.3 , contains a Stack-based Buffer Overflow vulnerability. A high-privileged attacker with remote network access can potentially exploit it to achieve code execution , resulting in high impact to confidentiality, integrity, and...
EUVD-2026-81463
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...
CVE-2026-90823
FatPipe MPVPN, WARP, and IPVPN appliances running end-of-life firmware 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker who can reach the management interface can submit a crafted authentication request that triggers an unchecked ...
github.com/go-openapi/swag: go-openapi/swag: Denial of Service via uncontrolled JSON recursion
A flaw was found in the go-openapi/swag library's jsonutils component. This vulnerability, caused by uncontrolled recursion during ordered JSON JavaScript Object Notation parsing and serialization, allows remote unauthenticated attackers to submit deeply nested JSON documents. This can lead to a...
Malicious code in key-notify-stack-water-module (npm)
Source: amazon-inspector 87ddef8cbb3df6b03d480fc9b842a397d7dc55f271ce04cedca24e2d5d1065b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in kernel-stack-grep-zero-table (npm)
Source: amazon-inspector d8586af4b87f0584e7f4565c38a5854e41b7072c3d9a2187bdaf4eed44194e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in karma-humanity-stack (npm)
The package karma-humanity-stack was found to contain malicious code. --- Credit: OpenSSF source...
SUSE-SU-2026:23873-1 Security update for jq
This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in decNumberToString bsc1218034. - CVE-2023-50268: stack-based buffer overflow ...
SUSE-SU-2026:23746-1 Security update for freeipmi
This update for freeipmi fixes the following issues: - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based buffer over-read in ipmi-oem bsc1278722. - CVE-2026-85506: Arbitrary code execution via...
K000163155: Python vulnerability CVE-2026-4224
Security Advisory Description When an Expat parser with a registered ElementDeclHandler parses an inline document type definition containing a deeply nested content model a C stack overflow occurs. CVE-2026-4224 Impact There is no impact; F5 products are not affected by this vulnerability. Securi...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
CVE-2026-25283 Stack-based Buffer Overflow in OOBM
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...
CVE-2026-25283
CVE-2026-25283 is a stack-based buffer overflow in OOBM , a component maintained by Qualcomm . The vulnerability is caused by memory corruption when unverified data from an external source is copied into a buffer larger than the allocated size. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a...
CVE-2026-81546
The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...