105604 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-110604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxmlstrtod when the locale decimal point is not '.'. Attackers can supply XML...
Linux Distros Unpatched Vulnerability : CVE-2026-110715
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating ...
Linux Distros Unpatched Vulnerability : CVE-2026-111280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea that allows malicious S7 peers to overflow client buffers via...
Linux Distros Unpatched Vulnerability : CVE-2026-111275
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nifticlib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifticonvertn2hdr2nim because the NIfTI-2 dim0 value is never...
Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2026_83553)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202683553 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript: ghostscrip...
CVE-2026-111881: Integer Underflow (Wrap or Wraparound)
FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZEMAX - 3 to StreamZero for sub-byte images. A malicious RDP clipboard peer can return a crafted 1-bpp BMP processed by clipboardsynthesizeimageformattobmp for...
AlmaLinux 9.2 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.2:CLSA-2026:1792190438)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792190438 advisory. - A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via...
Linux Distros Unpatched Vulnerability : CVE-2026-109827
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gfm2tsdecodeait of the file src/mediatools/ait.c of the component...
Rocky Linux 8 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2026_83552)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202683552 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript: ghostscrip...
Linux Distros Unpatched Vulnerability : CVE-2026-111880
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset...
Linux Distros Unpatched Vulnerability : CVE-2026-104004
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server proce...
CVE-2026-67407
A flaw was found in rabbitmq-server. Due to improper regular expression character escaping, topic permission templates for Message Queuing Telemetry Transport MQTT clients fail to sanitize hyphen characters. An authenticated, low-privileged attacker controlling their client identifier can exploit...
[slackware-security] libXpm
New libXpm packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libXpm-3.5.20-i586-1slack15.0.txz: Upgraded. This update fixes a security issue: Denial of service via unsigned underflow in libXpm's...
CVE-2026-111151
A flaw was found in OpenJPH. This vulnerability allows an attacker to cause a Denial of Service DoS and memory corruption by tricking a user or application into processing a crafted image file. When the High-Throughput JPEG 2000 HTJ2K decoder processes single-row image blocks, an out-of-bounds...
CVE-2026-111275
A flaw was found in nifticlib. This vulnerability can result in a Denial of Service DoS or memory corruption when an application processes a specially crafted NIfTI-2 image file. Due to missing range validation on dimension header values, an attacker could supply a malicious file that triggers a...
CVE-2026-111105
A flaw was found in rlottie. This vulnerability allows remote attackers to execute arbitrary code due to improper validation of user-supplied data, which can cause an out-of-bounds write before the start of an allocated buffer. Successful exploitation requires user interaction, such as convincing...
CVE-2026-110654
A flaw was found in zvbi. An out-of-bounds write vulnerability in the Teletext decoder allows an attacker to cause a Denial of Service DoS and memory corruption by supplying a specially crafted Teletext stream. When the application decodes the malicious stream containing unvalidated Dynamically...
CVE-2026-70197
A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment...
OPENSUSE-SU-2026:22123-1 Security update for gimp
This update for gimp fixes the following issues: Changes in gimp: - CVE-2026-106061: plug-ins: Bound allocation for XMC import bsc1284473 - CVE-2026-106062: plug-ins/file-dds: fix out of bounds write bsc1284474 - CVE-2026-106063: plug-ins: Add bounds checks for DICOM export bsc1284475 -...