CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5, related to a stack out-of-bounds read. A logical error in match_at() during regular expression searching could lead to unauthorized reads from a stack buffer.
A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities, denial of service and possible remote code execution.
In Open vSwitch (OvS) 2.7.0, there is a buffer over-read issue when parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message. This issue is caused by an unsigned integer underflow in the function `ofputil_pull_queue_get_config_reply10` in `lib/ofp-util.c`.
In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment.
The libautotrace.a in AutoTrace 0.31.1 has an issue with 'cannot be represented in type int', which may lead to errors in data processing.
The libautotrace.a in AutoTrace 0.31.1 has an issue with 'cannot be represented in type int', which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to data processing errors.
The libautotrace.a in AutoTrace 0.31.1 has a 'negative-size-param' issue in the ReadImage function in input-tga.c at line 528.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c at line 620.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c at line 559.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c at line 538.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c at line 528.
The libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle_fread function in input-tga.c at line 252.
The libautotrace.a in AutoTrace 0.31.1 has a 'left shift ... cannot be represented in type int' issue in input-bmp.c at line 516.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to errors in processing BMP data.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to errors in processing BMP data.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to errors in data processing.
The libautotrace.a in AutoTrace 0.31.1 has an issue with 'cannot be represented in type int', which may lead to errors in data processing.
The libautotrace.a in AutoTrace 0.31.1 has an issue related to 'cannot be represented in type int', which may lead to errors in data processing.