A vulnerability in apcupsd through version 3.14.14 causes uninitialized stack memory disclosure in the getupsvar() function within src/cgi/upsfetch.c. This affects CGI scripts such as upsstats.cgi, multimon.cgi, and upsfstats.cgi. When a STATUS line has fewer than three whitespace-separated tokens, sscanf does not assign a value to the destination buffer, but the function returns success, leading to uninitialized memory being printed in the HTTP response. The CVSS score is 3.7, indicating a medium severity issue.
A vulnerability in Blosc C-Blosc2 up to version 3.3.2 affects the blosclz_decompress function in the blosc/blosclz.c component. This vulnerability can lead to an integer overflow when manipulated, potentially impacting confidentiality, integrity, and availability. The attack requires high complexity and no privileges or user interaction. Upgrading to version 3.3.3 resolves this issue.
A vulnerability in GraphicsMagick up to version 1.3.47 affects the ExtractPostscript function in the WPG File Handler component. This flaw causes uncontrolled recursion when manipulated, potentially leading to denial of service. The vulnerability can be triggered remotely. A patch has been released promptly by the vendor to address this issue.
An integer overflow vulnerability in WSS4J's DER bounds check allows an attacker to cause an oversized memory allocation. By sending a specially crafted SOAP message with an X.509 certificate containing a SubjectKeyIdentifier extension length of 0x7FFFFFFF, an attacker can trigger a large memory allocation before authentication. This can lead to server memory exhaustion. Fixed versions 4.0.2, 3.0.6, and 2.4.4 address this issue.
An authentication bypass vulnerability exists in the sshd-ldap component of Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. This flaw allows attackers to bypass authentication due to improper escaping of LDAP filter metacharacters, enabling successful login with username "*" and password "*". The issue affects only SSH servers using the optional sshd-ldap component configured for password or public key authentication. Fixed versions 2.20.0 and 3.0.0-M6 properly escape LDAP filter parameters to prevent this vulnerability.
A vulnerability in QEMU's virtio-balloon component related to improper teardown of free-page bottom halves during unrealize operations has been identified (CVE-2026-66899). This issue affects multiple Ubuntu-packaged versions of QEMU. The severity is assessed as medium based on available data. No CVSS score or detailed impact analysis is provided. There is no information on available patches or vendor advisories in the provided data.
A vulnerability in QEMU's virtio-net hardware component involves improper handling of trailing padding when caching Receive Segment Coalescing (RSC) segments. This issue affects specific Ubuntu package versions of QEMU. The severity is assessed as medium based on available information. No CVSS score or detailed impact analysis is provided. There is no indication of known exploits in the wild or vendor-provided patches at this time.
A vulnerability in QEMU's VGA hardware emulation allows an out-of-bounds write in text mode after switching graphics surfaces. This issue affects specific Ubuntu package versions of QEMU and is classified as medium severity. No CVSS score or detailed exploit information is available.
A vulnerability in QEMU's io/channel-socket component causes zero length writes to be incorrectly treated as errors. This issue affects multiple specific Ubuntu package versions of QEMU. The severity is assessed as medium based on the available information.
Barman versions from 3.4.0 (Google Cloud), 3.6.0 (Azure), and 3.7.0 (AWS) up to and including 3.20.0 contain a vulnerability where unverified ownership in snapshot backup deletion allows a principal with write access to the backup catalog to cause deletion of unrelated cloud snapshots. This occurs because Barman uses its own credentials to delete snapshots based on identifiers read from a backup.info file without verifying snapshot ownership. The vulnerability is fixed in Barman 3.20.1.
CVE-2026-88841 is a medium severity vulnerability affecting multiple specific versions of BusyBox distributed in various Ubuntu releases. The exact nature and technical details of the vulnerability are unknown based on the provided data. There is no CVSS score or detailed description available, and no known exploits in the wild have been reported. The affected versions are explicitly listed and correspond to various Ubuntu package versions of BusyBox.
PyPy versions before 3.11.16 and 3.12.14 contain a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function. This flaw allows memory corruption when an application creates external-entity sub-parsers without retaining a reference to the parent parser. The vulnerability arises because the child parser holds a raw C pointer to the parent parser, which can be freed by PyPy's garbage collector, leading to dereferencing freed memory during XML parsing.
A heap-based buffer overflow vulnerability exists in rpm when parsing a symlink entry in an untrusted RPM package with a crafted RPMTAG_LONGFILESIZES value. This causes an integer overflow that reduces a buffer allocation to one byte, allowing attacker-controlled data to overflow the buffer. The flaw is exploitable via rpm2cpio, rpm2archive, and rpm -qlvp commands on untrusted packages.
A flaw in dash's internal pmatch() matcher causes unbounded recursion when built without libc fnmatch, leading to excessive CPU consumption with certain filename patterns. This affects local users who can supply filenames to the matcher. The vulnerability has a medium severity rating with a CVSS score of 5.5 and impacts multiple specific dash versions used in various Ubuntu releases.
A flaw in dash's printf builtin causes it to reserve only four bytes before converting Unicode \u or \U escapes, while some multi-byte tokens require five or six bytes. This can lead to a local user writing one or two bytes beyond the reserved space when supplying such escapes, potentially causing memory corruption. The issue affects multiple specific dash versions used in various Ubuntu releases. The vulnerability has a medium severity rating with no known exploits in the wild.
A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to overwrite or empty critical host system files such as passwd, group, machine-id, or resolv.conf. This can occur during app installation or upgrade, and in system-wide installations, the writes are performed with root privileges.
A vulnerability exists in Trusted Domain Project OpenDMARC up to version 1.4.2 in the SPF Macro Handler component. The flaw is in the function opendmarc_sp2_find_mailfrom_domain, causing improper authentication. This vulnerability can be exploited remotely. An exploit has been published. A patch identified by commit c48a74c758677fc5272a73eff15ffdbf8afda1a6 is available and recommended to fix the issue.
An out-of-bounds read vulnerability exists in libXi's XI2 enter/leave/focus cookie conversion in versions before 1.8.4. This flaw can be exploited by a malicious X server to crash an attached X client, resulting in a denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.6.
CVE-2026-95510 is a medium severity vulnerability in inetutils involving the use of an uninitialized struct sigaction. This flaw affects multiple specific versions of inetutils, primarily in Ubuntu package releases. No CVSS score is provided, and no known exploits or patches are currently documented.
CVE-2026-96543 is a vulnerability affecting multiple specific versions of the GIMP image manipulation software. The exact nature and technical details of the vulnerability are not provided in the available data. The severity is assessed as medium based on the provided metadata. There is no information on active exploitation or detailed impact. No patch or remediation details are available from the source data.