Apple Multiple Products Buffer Overflow Vulnerability

crypto: algif_aead - Revert to operating out-of-place

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Linux Kernel Race Condition Vulnerability

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as…

A flaw was found in the ptp4l program of the linuxptp package

A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key

A flaw was found in the way Samba maps domain users to local users

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length…

An out-of-bounds memory access flaw was found in the X.Org server

There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of…

<p>A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names.</p> <p>The ASP.NET Core cookie parser decodes entire cookie…

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow

A flaw was found in the way Samba handled file/directory metadata

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1

jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

Glibc: stack read overflow in getaddrinfo in no-aaaa mode

An information disclosure vulnerability was found in libvirt in versions before 6.3.0

Glibc: potential use-after-free in getaddrinfo()

A flaw was found in the way samba implemented SMB1 authentication

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might…

A flaw was found in pacemaker up to and including version 2.0.1

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)

MIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service (buffer over-read and application crash) by injecting invalid tokens into a GSSAPI…