261104 matches found
CVE-2026-67555
It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version...
EUVD-2026-53022
A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempEntry. The manipulation of the argument tempName leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit i...
CVE-2026-59817
creationtimestamp| type| source ---|---|--- 2026-08-04 22:31:36+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6 2026-08-05 00:00:39+00:00| seen| https://gist.github.com/alon710/206e14659b338e0afd8d846fac0809f6...
GHSA-V3Q9-HJ7J-63HQ vulnerabilities
Vulnerabilities for packages: airflow-core...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: nextcloud-server, renovate...
CVE-2026-6336 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
GHSA-M8RV-5G2X-5CG5 vulnerabilities
Vulnerabilities for packages: code-server...
CVE-2017-20242
CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...
CVE-2026-47781
CVE-2026-47781 affects PDM up to v2.26.9, where Core.init() calls load_plugins() and adds the project-local .pdm-plugins via site.addsitedir(). This causes .pth files to be processed, allowing attacker-controlled content in an untrusted repository checkout to execute arbitrary Python code before ...
CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
Flowise is a drag-and-drop user interface for building customized large language model LLM flows. Prior to 3.1.3, Flowise injects $vars into the code execution sandbox without requiring variables:view, bypassing the permission-protected Variables API. Variables for the active workspace are fetche...
CVE-2026-24253
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service and data tampering...
CVE-2026-69263
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core.ts denied only PATH, LDLIBRARYPATH, DYLDLIBRARYPATH, and NODEOPTIONS by exact...
CVE-2026-64634
A vulnerability allowing local privilege escalation to the Reporter service context...
CVE-2026-10032
creationtimestamp| type| source ---|---|--- 2026-08-04 16:48:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/j7o7c57m4b5cj...
CVE-2026-25289
creationtimestamp| type| source ---|---|--- 2026-08-04 16:45:02+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-qualcomm-10 2026-08-04 18:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbmmzbd3g2m 2026-08-04 23:37:36+00:00| seen|...
CVE-2026-15830
creationtimestamp| type| source ---|---|--- 2026-08-04 16:29:42+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/h5c2dvuor5uzy...
ROOT-APP-PYPI-CVE-2026-47265 CVE-2026-47265 in aiohttp - Patched by Root
Root has patched CVE-2026-47265 in the aiohttp package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-34517 CVE-2026-34517 in aiohttp - Patched by Root
Root has patched CVE-2026-34517 in the aiohttp package for Root:PyPI. Multiple fixed versions available...