UBUNTU-CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass...

CVE-2026-34475

CVE-2026-34475 affects Varnish Cache (Open Source) ≤ 8.0.0 and Varnish Enterprise ≤ 6.0.16r11, where an unchecked req.url in HTTP/1.1 requests with a root path (/) can be passed to backends that accept absolute-form URIs, enabling cache poisoning or authentication bypass. The issue stems from how...

CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass...

CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages c...

The vulnerability of CODESYS software products lies in the lack of checks for the correctness of received requests, allowing a perpetrator to execute arbitrary code.

The vulnerability of CODESYS software products is related to the lack of checks for the correctness of the requests received. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-25570

A vulnerability has been identified in SICAM SIAPP SDK All versions V2.1.7. The SICAM SIAPP SDK does not perform checks on input values potentially resulting in stack overflow. This could allow an attacker to perform code execution and denial of service...

CVE-2026-32746

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC Set Local Characters suboption handler because addslc does not check whether the buffer is full...

CVE-2026-22790 EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload

EVerest is an EV charging software stack. Prior to version 2026.02.0, HomeplugMessage::setuppayload trusts len after an assert; in release builds the check is removed, so oversized SLAC payloads are memcpy'd into a 1497-byte stack buffer, corrupting the stack and enabling remote code execution fr...

The vulnerability of the nsim_pp_hold_write() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nsimppholdwrite function in the drivers/net/netdevsim/netdev.c module of the Linux kernel lies in the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the build_insn() function in the arch/loongarch/net/bpf_jit.c module of the LoongArch architecture support for the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the buildinsn function in the arch/loongarch/net/bpfjit.c module of the LoongArch architecture support for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the decrypt_internal() function in the net/tls/tls_sw.c module of the TLS protocol implementation in Linux kernel allows a attacker to access protected information or cause service failure.

The vulnerability of the decryptinternal function in the net/tls/tlssw.c module of the TLS protocol implementation in Linux’s kernel involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the ipgre_xmit() function in the net/ipv4/ip_gre.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ipgrexmit function in the net/ipv4/ipgre.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the smsc75xx_rx_fixup() function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver allows a hacker to cause a service failure.

The vulnerability of the smsc75xxrxfixup function in the drivers/net/usb/smsc75xx.c module of the Linux network adapter driver framework is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the svc_rdma_build_writes() function in the net/sunrpc/xprtrdma/svc_rdma_rw.c module of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the svcrdmabuildwrites function in the net/sunrpc/xprtrdma/svcrdmarw.c module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the __skb_pull() function in the include/linux/skbuff.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the skbpull function in the include/linux/skbuff.h module of the Linux kernel is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE-SU-2026:20868-1 Security update for capstone

This update for capstone fixes the following issues: - CVE-2025-67873: Skipdata length unchecked leads to csinsn.bytes heap buffer overflow bsc1255309. - CVE-2025-68114: Unchecked vsnprintf return in SStreamconcat allows stack buffer overflow bsc1255310...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mt7925macwritetxwi80211 function not checking the frame length, potentially leading to...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unchecked allocation of entity names. This vulnerability may lead to null pointer dereferencing...

The vulnerability of the `ice_get_module_eeprom()` function in the `drivers/net/ethernet/intel/ice/ice_ethtool.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the icegetmoduleeeprom function in the drivers/net/ethernet/intel/ice/iceethtool.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attac...