CVE-2026-122319

Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of integers, booleans, or mixed types,...

EUVD-2026-117229

Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of integers, booleans, or mixed types,...

flow_divert-heap-overflow

flowdivert-heap-overflow flowdivert-heap-overflow is a proof-of-concept exploit for CVE-2016-1827, which was patched in OS X El Capitan 10.11.5 and iOS 9.3.2. The vulnerability is a series of unchecked arithmetic operations on an untrusted length supplied from user space in the function...

CVE-2017-14980

🐞 CVE-2017-14980: Sync Breeze Enterprise 10.0.28 - Stack-Based Buffer Overflow Stack-based buffer overflow in Sync Breeze Enterprise 10.0.28 reachable through the /login handler, demonstrating how unchecked input length can corrupt stack memory. 📑 Table of Contents Why this repository exists Why...

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos The sysctlcoalitiongetpidlist function in bsd/kern/syscoalition.c uses the coalitiongetpidlist function to collect a list of PIDs in a coalition. This function will return the number of PIDs if successful or a negative errno on failure. However, the...

cve-2026-25994_PJSIP

CVE-2026-25994 – PJNATH ICE Stack Buffer Overflow pjsip ≤ 2.16 Overview CVE-2026-25994 is a stack-based buffer overflow vulnerability affecting the ICE Interactive Connectivity Establishment implementation in pjsip ≤ 2.16, specifically within the PJNATH component. The vulnerability exists in the...

Citrix Security Advisory for CVE-2026-111497 Impact on Unicon eLux Scout

Unicon eLux Scout is impacted by the following vulnerability - CVE-2026-111497 - Google Brotli Unchecked Return Value Vulnerability The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems...

CVE-2025-52099

CVE-2025-52099 an integer overflow in SQLite 3.50.0 A proof-of-concept PoC to trigger an integer overflow in SQLite 3.50.0's setupLookaside function is provided below. This overflow occurs due to unchecked multiplication of sz nBig, which can wrap into a negative value and result in invalid memor...

Unchecked Return Value

Overview github.com/labstack/echo/v4/middleware is a middleware package for echo. Affected versions of this package are vulnerable to Unchecked Return Value via the BodyDump middleware in middleware/bodydump.go. An attacker can cause a handler to accept a truncated request despite the configured...

Snappy-java: JVM Crash From Unchecked Ranges In Snappy.arrayCopy And SnappyOutputStream.rawWrite

Impact "Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset" called a native "memcpy" without validating the ranges. A negative or oversized "byteLength" or offset read or wrote outside the arrays and crashed the JVM. "SnappyOutputStream.rawWrite" and...

snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

GHSA-XQRX-QH46-34M7 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite

Impact Snappy.arrayCopyObject src, int offset, int byteLength, Object dest, int destOffset called a native memcpy without validating the ranges. A negative or oversized byteLength or offset read or wrote outside the arrays and crashed the JVM. SnappyOutputStream.rawWrite and...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497 Google Brotli Unchecked Return Value...

CVE-2026-82943 Out-of-Bounds Read via Unchecked Length Values

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An...

CVE-2026-82943 Out-of-Bounds Read via Unchecked Length Values

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the master to read data from memory locations beyond the intended buffer. The software uses length values from device responses without validating them against actual buffer sizes. An...

CVE-2026-89319

The JweDirectDecryptorBlock.Decrypt function is vulnerable to a flaw where it reads a 64-bit plaintext length from the _thales_aad protected-header field without performing any validation. This lack of input validation leads to three distinct failure states: a truncated field causes a binary.BigE...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Unchecked Return Value in Libreswan (CVE-2026-14957)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Unchecked Return Value in Libreswan that can result in a denial of service condition in FIPS mode. Libreswan is used in our Speech Service runtimes This vulnerability has been addressed. Please read the details for remediation below...

CrowdStrike Channel File 291: An Engineering Analysis of a Global Endpoint Outage

On July 19, 2024, a CrowdStrike Falcon content update caused Windows systems to crash, affecting about 8.5 million devices according to a Microsoft estimate. The immediate defect was an inconsistency between a detection template that declared 21 inputs and sensor code that supplied 20. A new...

Amazon Linux 2023 : glycin-loaders (ALAS2023-2026-3215)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3215 advisory. Fix RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot Fix RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2 Tenable has extracted the preceding...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050-core: fix pmruntime error handling The return value of pmruntimegetsync is not checked, allowing the driver to access hardware that may fail to resume. The device usage count is also unconditionally incremented...