10142 matches found
ALPINE-CVE-2026-95101
Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an unauthenticated attacker may be able to inject data in the proxied request. Impact This vulnerability may allow remote attackers to inject...
ALPINE-CVE-2026-93479
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
ALPINE-CVE-2026-53612
util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...
ALPINE-CVE-2026-53613
util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy mount2 path is used without /proc, restricted non-root mount requests validate an /etc/fstab target before the mount operation re-resolves that pathname. ...
ALPINE-CVE-2026-15176
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
ALPINE-CVE-2026-101338
When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write attacker controlled data of unlimited size. Zone files which are written out by NSD itself, such as for zones for which t...
ALPINE-CVE-2026-101339
A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field a HIP Rendezvous server can overwrite the stack with up to 191 bytes of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD instance is...
ALPINE-CVE-2026-101341
Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...
ALPINE-CVE-2026-101337
When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD...
ALPINE-CVE-2026-92392
During an upload, curl mishandles HTTP/2 RSTSTREAM received from the server with reason HTTP11REQUIRED or REFUSEDSTREAM leading to a use after free of a struct Curleasy object...
ALPINE-CVE-2026-94453
Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...
ALPINE-CVE-2026-77207
Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...
ALPINE-CVE-2026-77205
Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The...
ALPINE-CVE-2026-77206
Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...
ALPINE-CVE-2026-96957
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
ALPINE-CVE-2026-96958
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-96960
Asymmetric resource consumption amplification in .NET allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-96959
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-96303
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...
ALPINE-CVE-2026-96251
Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-96236
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-96235
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-96234
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
ALPINE-CVE-2026-96238
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
ALPINE-CVE-2026-96237
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-96229
Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...
ALPINE-CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
ALPINE-CVE-2026-96232
Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network...
ALPINE-CVE-2026-96224
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
ALPINE-CVE-2026-96230
Improper neutralization of input during web page generation 'cross-site scripting' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
ALPINE-CVE-2026-88092
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to perform tampering over a network...
ALPINE-CVE-2026-87697
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-85790
Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network...
ALPINE-CVE-2026-85363
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...
ALPINE-CVE-2026-84008
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-83520
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-70188
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
ALPINE-CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
ALPINE-CVE-2026-70197
Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...
ALPINE-CVE-2026-70196
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-70186
Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-70179
Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
ALPINE-CVE-2026-70183
Concurrent execution using shared resource with improper synchronization 'race condition' in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
ALPINE-CVE-2026-70181
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
ALPINE-CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...