https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:23:47 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-11338 bdu:2026-11338 https://cve.radiocsirt.org/vuln/bdu:2026-11338 https://cve.radiocsirt.org/vuln/euvd-2026-308147 EUVD-2026-308147 https://cve.radiocsirt.org/vuln/euvd-2026-308147 https://cve.radiocsirt.org/vuln/fkie_cve-2026-39457 <p>When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)&#39;s file descriptor set size limit of FD_SETSIZE (1024).</p> <p>An attacker who is able to force a libnv application to allocate large file descriptors, e.g., by opening many descriptors and executing a program which is not careful to close them upon startup, can trigger stack corruption. If the target application is setuid-root, then this could be used to elevate local privileges.</p> <p>When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)&#39;s file descriptor set size limit of FD_SETSIZE (1024).</p> <p>An attacker who is able to force a libnv application to allocate large file descriptors, e.g., by opening many descriptors and executing a program which is not careful to close them upon startup, can trigger stack corruption. If the target application is setuid-root, then this could be used to elevate local privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-39457 https://cve.radiocsirt.org/vuln/ghsa-gfv8-jx4x-32h7 <p>When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)&#39;s file descriptor set size limit of FD_SETSIZE (1024).</p> <p>An attacker who is able to force a libnv application to allocate large file descriptors, e.g., by opening many descriptors and executing a program which is not careful to close them upon startup, can trigger stack corruption. If the target application is setuid-root, then this could be used to elevate local privileges.</p> <p>When exchanging data over a socket, libnv uses select(2) to wait for data to arrive. However, it does not verify whether the provided socket descriptor fits in select(2)&#39;s file descriptor set size limit of FD_SETSIZE (1024).</p> <p>An attacker who is able to force a libnv application to allocate large file descriptors, e.g., by opening many descriptors and executing a program which is not careful to close them upon startup, can trigger stack corruption. If the target application is setuid-root, then this could be used to elevate local privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-gfv8-jx4x-32h7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1324 <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um sich erweiterte Rechte, einschließlich Superuser-Rechte, zu verschaffen, beliebigen Code auszuführen – auch mit Administratorrechten –, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um sich erweiterte Rechte, einschließlich Superuser-Rechte, zu verschaffen, beliebigen Code auszuführen – auch mit Administratorrechten –, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1324