98029 matches found
CVE-2026-103754
A flaw in ansible-runner 's unstream_dir() function allows for path traversal and symlink escape during the extraction of a streamed zip archive. The vulnerability exists because the function fails to validate symbolic link targets and applies chmod() and utime() to unsanitized filesystem paths d...
libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access
A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to re...
Important: Red Hat Security Advisory: libpcap security update
An update for libpcap is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
kernel: netfilter: conntrack: remove sprintf usage
A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...
kernel: wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925loadclc This comparison should be = instead of to prevent an out of bounds read and write...
CVE-2026-86095
A flaw was found in netcdf-c. An attacker can craft a malicious HDF5 Hierarchical Data Format 5 file with an oversized attribute name. When an application processes this file and attempts to enumerate attribute names, the oversized name can cause an out-of-bounds write, leading to memory corrupti...
EUVD-2026-90645
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
CVE-2026-103251 n8n before 1.123.80, 2.39.6, and 2.40.1 Package Install Validation Bypass via PubSub
n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for queue mode deployments. Attackers with Redis write access can bypass name validation, permission checks, checksum...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
BIT-TOMCAT-2026-79677 Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout
Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0 through 11.0.25, from 10.1.0 through 10.1.5...
BIT-RABBITMQ-2026-67224 RabbitMQ: Admin path-traversal write via trace name
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, The trace consumer constructs the output path as filename:joinTraceDir, Name ++ ".log" where Name comes from PUT /api/traces/:vhost/:name. No saferelativepath / traversal check is applied on...
Security Bulletin: Due to use of VMware ESXi and vCenter, IBM Cloud Pak System is affected by multiple vulnerabilities.
Summary Vulnerabilities in VMware ESXi and vCenter affect IBM Cloud Pak System. IBM Cloud Pak System version 2.3.6.2 has addressed these vulnerabilities. Cloud Pak Sytem has updated Platform System Manager PSM and workload nodes to VMware ESXi 83U3k and VMware vCenter to VCSA 83U3k. Vulnerability...
CLEANSTART-2024-YS67864 Out of bounds write in TabStrip in Google Chrome prior to 91
Security vulnerability affects the chromium package. Out of bounds write in TabStrip in Google Chrome prior to 91...
CLEANSTART-2024-IC10975 Out of bounds write in ANGLE in Google Chrome prior to 91
Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...
CLEANSTART-2024-UP16796 Out of bounds write in ANGLE in Google Chrome prior to 91
Security vulnerability affects the chromium package. Out of bounds write in ANGLE in Google Chrome prior to 91...
CLEANSTART-2024-DU13933 Out of bounds write in Autofill in Google Chrome prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Autofill in Google Chrome prior to 92...
CLEANSTART-2024-DM83445 Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92...
CLEANSTART-2024-WX22664 Out of bounds write in Tab Groups in Google Chrome prior to 92
Security vulnerability affects the chromium package. Out of bounds write in Tab Groups in Google Chrome prior to 92...