Month: January 2026

Information published. Continue reading CVE-2023-52969 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.→

Information published. Continue reading CVE-2024-45310 runc can be confused to create empty files/directories on the host→

Information published. Continue reading CVE-2025-61594 URI Credential Leakage Bypass over CVE-2025-27221→

Information published. Continue reading CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion→

Information published. Continue reading CVE-2025-69277 libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren’t in the main cryptographic group.→

Information published. Continue reading CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap→

Information published. Continue reading CVE-2025-11961 OOBR and OOBW in pcap_ether_aton() in libpcap→

Information published. Continue reading CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE→