Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Description | Published | Updated |
|---|---|---|---|
| msrc_cve-2026-63076 | Invalid Pointer Dereference in CMP Server via Crafted protectionAlg | 2026-08-27T01:10:43.000Z | 2026-09-10T03:35:46.000Z |
| msrc_cve-2026-63074 | CMP Indefinite Cache Growth of ExtraCerts | 2026-08-27T01:11:34.000Z | 2026-09-10T03:35:25.000Z |
| msrc_cve-2026-75593 | BuildKit: Malicious client can bypass destination directory validation on local sources upload | 2026-08-23T01:04:23.000Z | 2026-09-10T03:34:56.000Z |
| msrc_cve-2026-61711 | BuildKit: Custom frontend could bypass Seccomp/AppArmor | 2026-08-23T01:04:11.000Z | 2026-09-10T03:34:47.000Z |
| msrc_cve-2026-61712 | BuildKit: Possible runtime DoS via unbounded group parsing | 2026-08-23T01:04:17.000Z | 2026-09-10T03:34:38.000Z |
| msrc_cve-2026-17106 | Tar extraction in moby/go-archive can write outside the destination directory via link following | 2026-08-23T01:03:37.000Z | 2026-09-10T03:34:29.000Z |
| msrc_cve-2026-73073 | Vim: Arbitrary Ex Command Execution in C Omni-Completion | 2026-08-20T21:59:35.000Z | 2026-09-10T03:33:51.000Z |
| msrc_cve-2026-72098 | dm-verity: fix buffer overflow in FEC calculation | 2026-08-23T14:56:27.000Z | 2026-09-10T03:33:17.000Z |
| msrc_cve-2026-19487 | Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass | 2026-08-23T15:03:46.000Z | 2026-09-10T03:33:02.000Z |
| msrc_cve-2026-85507 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info). | 2026-09-05T01:26:35.000Z | 2026-09-10T03:32:05.000Z |
| msrc_cve-2026-68409 | wifi: mac80211: defer link RX stats percpu free to RCU | 2026-08-11T01:12:50.000Z | 2026-09-10T03:31:58.000Z |
| msrc_cve-2026-85506 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-info subcommand to dell get-system-info). | 2026-09-05T01:26:27.000Z | 2026-09-10T03:31:56.000Z |
| msrc_cve-2026-68129 | gve: fix Rx queue stall on alloc failure | 2026-08-11T01:11:20.000Z | 2026-09-10T03:31:50.000Z |
| msrc_cve-2026-85509 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than requested. | 2026-09-05T01:26:19.000Z | 2026-09-10T03:31:47.000Z |
| msrc_cve-2026-68183 | firmware: stratix10-svc: fix memory leaks and list corruption bugs | 2026-08-11T01:02:49.000Z | 2026-09-10T03:31:42.000Z |
| msrc_cve-2026-85505 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitsu.c when a BMC provides a short response, a different vulnerability than CVE-2026-50031 (which has different affected versions). | 2026-09-05T01:26:10.000Z | 2026-09-10T03:31:37.000Z |
| msrc_cve-2026-15534 | Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch | 2026-08-11T01:08:00.000Z | 2026-09-10T03:31:34.000Z |
| msrc_cve-2026-85508 | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (cmc-ipv6-info subcommand to dell get-system-info). | 2026-09-05T01:26:02.000Z | 2026-09-10T03:31:28.000Z |
| msrc_cve-2026-85504 | FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text responses. | 2026-09-05T01:25:54.000Z | 2026-09-10T03:31:19.000Z |
| msrc_cve-2026-64377 | cpufreq: qcom-cpufreq-hw: Fix possible double free | 2026-07-26T01:03:35.000Z | 2026-09-10T03:30:59.000Z |
| msrc_cve-2026-15308 | Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations | 2026-07-12T01:01:27.000Z | 2026-09-10T03:30:39.000Z |
| msrc_cve-2026-75538 | A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer | 2026-09-03T01:06:31.000Z | 2026-09-10T03:29:30.000Z |
| msrc_cve-2026-74994 | inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth | 2026-09-03T01:06:22.000Z | 2026-09-10T03:29:20.000Z |
| msrc_cve-2026-74835 | inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception | 2026-09-03T01:06:14.000Z | 2026-09-10T03:29:12.000Z |
| msrc_cve-2026-73812 | inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length | 2026-09-03T01:06:05.000Z | 2026-09-10T03:29:02.000Z |
| msrc_cve-2026-73276 | inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i | 2026-09-03T01:05:56.000Z | 2026-09-10T03:28:53.000Z |
| msrc_cve-2026-28808 | ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) | 2026-04-23T01:10:24.000Z | 2026-09-10T03:28:46.000Z |
| msrc_cve-2026-73270 | httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems | 2026-09-03T01:05:47.000Z | 2026-09-10T03:28:44.000Z |
| msrc_cve-2026-71562 | httpc does not bound server-supplied numeric header values before integer conversion | 2026-09-03T01:05:38.000Z | 2026-09-10T03:28:33.000Z |
| msrc_cve-2026-71380 | httpd applies no timeout while receiving a request body, parking a worker on a stalled client | 2026-09-03T01:05:29.000Z | 2026-09-10T03:28:24.000Z |