CVE-2026-102969 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available. No known exploits are reported in the wild. No patch or remediation information is provided, so patch status is not confirmed. The affected versions are explicitly listed and include various releases from 1:1.27.3-1 through 1:1.43.9+dfsg-1ubuntu1 and related builds. No geographic targeting is indicated.
CVE-2026-102970 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided information. There is no CVSS score or detailed description available. No known exploits in the wild have been reported. The affected versions include various releases from 1:1.27.3-1 through 1:1.43.9+dfsg-1ubuntu1 and others as listed. No patch or remediation information is provided, and the product is not a cloud service.
CVE-2026-102971 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available. No known exploits in the wild have been reported, and no patch or remediation information is provided. The affected versions include various releases from 1.27.3 through 1.43.9+dfsg-1ubuntu1 and related builds.
CVE-2026-102972 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided information. There is no CVSS score or detailed description available. No known exploits are reported in the wild. The affected versions include various releases primarily identified by Ubuntu package versions. No patch or remediation information is provided.
CVE-2026-102973 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are unknown based on the provided information. There is no CVSS score or detailed description available, and no known exploits in the wild have been reported. The affected versions include various releases from 1:1.27.3-1 through 1:1.43.9+dfsg-1ubuntu1 and others as explicitly listed. No patch or remediation information is provided, so the patch status is not confirmed.
CVE-2026-102974 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are not provided. There is no CVSS score or detailed impact information available. No known exploits are reported in the wild. No patch or remediation information is currently available.
CVE-2026-102975 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are not provided. There is no CVSS score or detailed impact information available. No known exploits in the wild have been reported. No patch or remediation information is currently available.
CVE-2026-102977 is a medium severity vulnerability affecting multiple specific versions of MediaWiki. The exact nature and technical details of the vulnerability are not provided. There is no CVSS score or detailed description available, and no known exploits in the wild have been reported. The affected versions are explicitly listed, covering various releases primarily in the 1.27.x, 1.31.x, 1.35.x, 1.39.x, and 1.43.x series. No patch or remediation information is provided, and the product is not a cloud service.
A heap out-of-bounds read/write vulnerability exists in the MS-MPPE key re-encryption functionality of radsecproxy. This vulnerability affects multiple specific versions of radsecproxy. The severity is assessed as medium. No CVSS score is provided, and no known exploits are reported in the wild. There is no information about available patches or vendor advisories.
A denial-of-service vulnerability exists in 389-ds-base where an unauthenticated remote attacker can exhaust the server's worker-thread pool by sending crafted LDAP operations. This causes the server to block and deny service to all clients for the duration of the attack.
Authlib versions 1.7.2 and below have a vulnerability where discovery JSON metadata is cached without proper validation or binding to the issuer origin. This flaw allows an attacker to supply a poisoned discovery response that replaces all endpoint URLs with attacker-controlled values, potentially leading to severe security impacts.
A vulnerability in tnef allows an attacker to cause a denial of service or leak sensitive memory by providing a specially crafted file with uncompressed Rich Text Format data. The flaw occurs due to improper validation of input buffer boundaries in the function get_rtf_data_from_buf(), leading to out-of-bounds reads. This can crash the application or expose sensitive memory contents in output files.
A vulnerability in tnef allows a remote attacker to cause a denial of service by providing a specially crafted TNEF file with multiple message bodies. This triggers improper memory management, resulting in use-after-free and double-free conditions that crash the application. The issue affects several specific versions of tnef. The CVSS score is 6.5, indicating a medium severity impact focused on availability.
A heap-based buffer overflow vulnerability exists in the tnef utility's find_free_number() function when generating numbered backup suffixes for duplicate filenames. This occurs if numbered backups are enabled and file overwriting is disabled, allowing an attacker to supply a crafted TNEF file with many colliding attachment filenames. The overflow can cause application crashes resulting in denial of service or potentially allow arbitrary code execution.
A vulnerability in ansible-runner's unstream_dir() function allows crafted zip archives to create or modify files and symbolic links outside the intended directory without proper validation. This can lead to unauthorized changes in file permissions and potentially code execution. The flaw affects specific ansible-runner versions and has a medium severity rating.
A vulnerability in GEGL's Radiance HDR loader causes it to read past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. This can lead to application crashes when opening specially crafted HDR files. The issue affects multiple specific versions of GEGL and has a medium severity rating.
A stack-based buffer overflow vulnerability exists in OpenSC up to version 0.27.1 in the function setcos_construct_fci_44. This flaw can be triggered by manipulating the argument type_attr and may be exploited remotely. The vulnerability has a medium severity with a CVSS score of 5.5. A patch identified by commit ad730304052937c32b4eb489a06835ac6123632c is available to fix this issue. It is recommended to apply the patch to affected versions to mitigate the risk.
A vulnerability in libsoup2.4's SoupServer allows an unauthenticated remote attacker to perform HTTP request smuggling. When an HTTP/1.x client sends a request with 'Expect: 100-continue' and a request body, if SoupServer returns a final response before reading the body, it neither drains the body nor closes the connection. This causes leftover bytes to be interpreted as a new HTTP request, potentially leading to unintended request handling. The issue affects many specific versions of libsoup2.4. The CVSS score is 5.3, indicating a medium severity level.
NVIDIA GPU Display Driver for Linux version 304 contains a vulnerability in the kernel mode layer that allows an unprivileged user to cause improper release of memory resources. This can leave memory mappings accessible after the underlying memory is reused. Exploitation could lead to code execution, denial of service, privilege escalation, information disclosure, and data tampering. The CVSS score is 7.8, indicating a medium severity level. Multiple specific driver versions are affected. No patch or remediation information is provided in the input data.
NVIDIA GPU Display Driver versions 304 for Windows and Linux contain a kernel mode vulnerability that allows improper access control. Exploitation of this flaw can cause denial of service but does not impact confidentiality or integrity. The vulnerability has a medium severity rating with a CVSS score of 5.5.