74149 matches found
CVE-2026-119143
RUSTSEC-2026-0357...
CVE-2026-119142
RUSTSEC-2026-0354...
CVE-2026-119141
RUSTSEC-2026-0356...
CVE-2026-119140
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni...
CVE-2026-119139
RUSTSEC-2026-0353...
CVE-2026-119138
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni...
CVE-2026-119137
RUSTSEC-2026-0359...
CVE-2026-119136
Wasmtime 42.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains insuff...
CVE-2026-119135
RUSTSEC-2026-0355...
CVE-2026-119134
RUSTSEC-2026-0363...
CVE-2026-119133
Wasmtime 47.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a memo...
CVE-2026-119132
RUSTSEC-2026-0360...
CVE-2026-119131
Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a deni...
CVE-2026-119130
Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0...
CVE-2026-119124
ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in i...
CVE-2026-93008
A flaw was found in dnsmasq. When following a CNAME in a DNS response, the resolver can cache records for the CNAME target without checking that those records belong to the responding server's authorized zone. In split-DNS deployments that send some domains to a specific upstream, an attacker who...
CVE-2026-93010
A flaw was found in dnsmasq. When DHCP leasequery is enabled without listing allowed source addresses, the server does not check who sent the query. A host on the local network can request DHCP lease records and learn assigned addresses, MAC addresses, hostnames, and related lease metadata. The...
CVE-2026-119123
ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in...
CVE-2026-93006
A flaw was found in dnsmasq. The TFTP server can serve the wrong file contents because a recently used transfer cache is not invalidated when a transfer finishes. An attacker on the local network who can request a TFTP file may cause a later client to receive previously cached data instead of the...
CVE-2026-93007
A flaw was found in dnsmasq. The TCP DNS service uses a small fixed pool of child processes and does not set a receive timeout on client connections. A remote attacker can open idle TCP connections to port 53 and occupy the entire pool, preventing new TCP DNS connections and DNSSEC validation tha...
CVE-2026-93009
A flaw was found in dnsmasq. The DHCPv6 client hostname parser can read one byte past the end of a crafted FQDN option because it checks the next label length before confirming the pointer is still inside the option. An attacker on the local network can trigger this with a single DHCPv6 packet. T...
CVE-2026-93011
A flaw was found in dnsmasq. After a reduction of internal domain-name buffer sizes, the DNSSEC validator can write a few bytes past a name buffer when converting names to and from DNS wire format. An attacker who can cause the server to validate a crafted DNSSEC response may overwrite a small...