ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly
CVE-2026-63090
ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allo
#cwe-122
共收录 1219 条相关情报。
← 返回所有主题FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the modular-exponentiati...
CVE-2026-64620
FreeRDP before 3.28.0 (affected out_length, so out-of-bounds bytes are written before the bounds check. On the server s
FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common
CVE-2026-64620
FreeRDP before 3.28.0 (affected out_length, so out-of-bounds bytes are written before the bounds check. On the server s
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-GHCB scratch area When setting the length of the GHCB sc...
CVE-2026-63939
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the in-
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in...
CVE-2026-16118
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in...
CVE-2026-48373
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i
PocketSphinx: Buffer overflows in language and acoustic model loading code
CVE-2026-54559
### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary condition
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i...
CVE-2026-48373
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an atta...
CVE-2026-16118
A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and above, prior to 4.14.5, a size_t integer underflow in os_cryp...
CVE-2026-44251
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and abov
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulne...
CVE-2026-40106
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above p
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and above, prior to 4.14.5, a heap buffer overflow in wazuh-analy...
CVE-2026-34150
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and abov
Wazuh : size_t underflow in msgs.c ReadSecMSG causes wazuh-remoted DoS and potential heap overflow via crafted agent message
CVE-2026-44251
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 3.0.0 and abov
Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)
CVE-2026-40106
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above p
Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing
CVE-2026-34150
Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions 1.0.0 and abov
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects...
CVE-2026-15449
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately...
CVE-2026-15422
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC_GETMACPROP and DLDIOC_SETMACPROP ioctls on /dev/dld. drv...
CVE-2026-15449
A time-of-check to time-of-use (TOCTOU) flaw in the illumos data-link pseudo-driver (dld) affects handling of the DLDIOC
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in the chunk. Since this lookup runs d...
CVE-2026-15422
The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handling (peerDigestSwapInMask in src/peer_digest.cc), Squid is...
CVE-2026-50012
Squid is a caching proxy for the Web. Prior to 7.6, due to an improper input validation bug in cache digest reply handli