CVE-2026-115505
— libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle…
Remote
|
Memory Corruption
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115504
— CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115503
— Ghidra before 12.2 Denial of Service via Compressed Extension Archive
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persu…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115398
— Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can p…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112332
— Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service…
Remote
|
Misconfiguration
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112331
— Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single craft…
Remote
|
Denial of Service
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112330
— Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted…
Remote
|
Denial of Service
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95721
— Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interfa…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95720
— Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95719
— Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95718
— Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95717
— Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management…
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95716
— Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Ch…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95715
— Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95714
— Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AO…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95713
— Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command…
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95712
— Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 …
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95711
— Authentication Bypass Leading to Remote Code Execution in AOS-10 Web-Based Management Int…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95710
— Unauthenticated Adjacent Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95709
— Authenticated Command Injection Vulnerabilities in AOS-10
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
