27163 matches found
EUVD-2026-35099
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
CVE-2026-44185
The Apache HTTP Server versions 2.4.0 through 2.4.67 are vulnerable to a Buffer Over-read vulnerability. The issue occurs when the server processes outbound OCSP requests directed toward an attacker-controlled OCSP server. Exploitation of this flaw could allow a malicious actor to cause service i...
CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
Buffer Over-read vulnerability in Apache HTTP Server via outbound OCSP requests to an attacker controlled OCSP server This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
CVE-2026-11528 Tenda AC18 Web Management getRebootStatus sub_45304 stack-based overflow
A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely...
CVE-2026-11528
CVE-2026-11528 affects Tenda AC18 with firmware 15.03.05.05. The vulnerability is in the Web Management Interface, specifically function sub_45304 in the /goform/getRebootStatus module, where manipulation of the callback argument causes a stack-based buffer overflow. This can be exploited remotel...
Linux Distros Unpatched Vulnerability : CVE-2026-48977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parselevel0xml processing in src/openslide-vendor-ventana.c...
PT-2026-47310
A vulnerability was found in Tenda AC18 15.03.05.05. The affected element is the function sub 45304 of the file /goform/getRebootStatus of the component Web Management Interface. The manipulation of the argument callback results in stack-based buffer overflow. The attack may be launched remotely...
PT-2026-47366
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow exists in the retrieve status function within dm-ioctl. The issue occurs when the outptr variable is aligned to the next 8-byte boundary using align ptroutptr without...
PT-2026-50588
Name of the Vulnerable Software and Affected Versions OpenSlide versions 3.4.1 through 4.0.0 Description The parse level0 xml function in src/openslide-vendor-ventana.c fails to properly validate row or column tile counts when processing crafted Ventana BIF files. By providing nonpositive counts,...
MINI-68X3-JXFH-56PW
Bulletin has no description...
MINI-HHPM-3JP6-5MMM
Bulletin has no description...
MINI-RV7X-7635-VFCF
Bulletin has no description...
MINI-P4GM-GF3R-W5JG
Bulletin has no description...
MINI-8V24-2WP8-FR9H
Bulletin has no description...
MINI-JJMP-FCVG-WGQJ
Bulletin has no description...
MINI-264C-CVW5-XCW6
Bulletin has no description...
CVE-2026-11499
creationtimestamp| type| source ---|---|--- 2026-06-07 13:51:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709147982329600 2026-06-08 09:00:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mnrcywmxxc2m 2026-06-08 09:00:41+00:00| seen|...
CVE-2026-11498
creationtimestamp| type| source ---|---|--- 2026-06-07 13:37:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116709092961508721 2026-06-08 11:00:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnrjoutcy42s 2026-06-08 13:07:00+00:00| seen|...
MINI-W44X-HC4F-8G44
Bulletin has no description...
CVE-2026-7792
The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Insufficient Verification of Data Authenticity in versions up to and including 1.10.0.1. This is due to the PayPal Commerce webhook endpoint processing unauthenticat...