76052 matches found
CVE-2026-54874
Excessive Memory Use Buffering DTLS Records for a Future Epoch...
CVE-2026-63074
CMP Indefinite Cache Growth of ExtraCerts...
CVE-2026-63076
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...
CVE-2026-75803
AEAD Forgeries with Empty Ciphertext When Using EVPCipher...
CVE-2026-63073
Untrusted Sender DN Used as Format String in CMP Response Validation...
CVE-2026-14457
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate...
CVE-2026-18798
QUIC Server May Trigger Double Free When Processing INITIAL Packet...
CVE-2026-63072
Heap Buffer Overflow in CMS Key Unwrapping...
CVE-2026-63075
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion...
CVE-2026-18301
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerabi...
CVE-2026-63388
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-63381
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured b...
CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2...
CVE-2026-28947
...
CVE-2026-28984
...
CVE-2026-75595
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...
CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution...
CVE-2026-43745
...
CVE-2026-43720
...
CVE-2026-43731
...
CVE-2026-68552
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...
CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-73255
Mongoose is an embedded web server and network library. Prior to 7.22,...
CVE-2026-76878
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the allprojects query parameter is set to false. The API checks for the presence of the allprojects key rather than its value; a true value enforces the administrator-only policy, but a false value removes the key a...
CVE-2026-18917
A flaw was found in libvirt. An unprivileged local user could exploit...
CVE-2026-64783
...
CVE-2026-28953
...
CVE-2026-76888
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-77506
ZSA-2026-12...
CVE-2026-18304
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...
CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language...
CVE-2026-18309
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerab...
CVE-2026-76881
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2025-30156
Unknown description...
CVE-2026-76918
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76884
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-73259
Mongoose is an embedded web server and network library. Prior to 7.22,...
CVE-2026-76891
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-75596
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at...
CVE-2026-77587
security update...
CVE-2026-28958
...
CVE-2026-76882
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...