21711 matches found
OpenSC: Stack-buffer-overflow WRITE in GET RESPONSE
...
FRRouting FRR EVPN Type-2 Route bgp_evpn.c process_type2_route access control
...
Incus does not verify combined fingerprint when downloading images from simplestreams servers
...
brace-expansion: Zero-step sequence causes process hang and memory exhaustion
...
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.
...
A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.
...
Libssh: improper sanitation of paths received from scp servers
...
Libssh: buffer underflow in ssh_get_hexa() on invalid input
...
Libssh: libssh: denial of service via inefficient regular expression processing
...
Libssh: libssh: denial of service via improper configuration file handling
...
Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
...
Picomatch has a ReDoS vulnerability via extglob quantifiers
...
Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code
...
Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
...
LIBPNG has ARM NEON Palette Expansion Out-of-Bounds Read on AArch64
...
LIBPNG has use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE`
...
A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass
...
Authenticated query containing a TKEY record may cause named to terminate unexpectedly
...
Memory leak in code preparing DNSSEC proofs of non-existence
...
python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
...
Flannel vulnerable to cross-node remote code execution via extension backend BackendData injection
...
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
...
etcd: Authorization bypasses in multiple APIs
...
etcd: Nested etcd transactions bypass RBAC authorization checks
...
Chromium: CVE-2026-4442 Heap buffer overflow in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4680 Use after free in FedCM
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4679 Integer overflow in Fonts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4677 Out of bounds read in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4675 Heap buffer overflow in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4674 Out of bounds read in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4673 Heap buffer overflow in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4678 Use after free in WebGPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-4676 Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability - Rejected
...
Github.com/antchfx/xpath: xpath: denial of service via crafted boolean xpath expressions
...
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
...
Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
...
wifi: mac80211: fix NULL deref in mesh_matches_local()
...
nfnetlink_osf: validate individual option lengths in fingerprints
...
icmp: fix NULL pointer dereference in icmp_tag_validation()
...
NGINX ngx_http_mp4_module vulnerability
...
NGINX ngx_stream_ssl_module vulnerability
...
NGINX ngx_mail_proxy_module vulnerability
...
NGINX ngx_http_mp4_module vulnerability
...
NGINX ngx_http_dav_module vulnerability
...
NGINX ngx_mail_auth_http_module vulnerability
...
Squid has Denial of Service in ICP Response handling
...
Squid has issues in ICP message handling
...
Squid vulnerable to Denial of Service in ICP Request handling
...
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
...