16209 matches found
Next.js Framework 13.4.x < 15.5.16 / 16.x < 16.2.5 Stored XSS
The Next.js Framework on the remote host is affected by a stored cross-site scripting vulnerability: - App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In affected versions, malformed nonce values derived from...
imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in SyncAuthenticPixelCacheNexus
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5583138096218112 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
CLSA-2026-1778769697 kernel: Fix of 31 CVEs
net: skbuff: propagate shared-frag marker through pskbcopy - HID: ignore non-functional sensor in HP 5MP Camera CVE-2025-21992 - net: fix crash when config small gsomaxsize/gsoipv4maxsize CVE-2024-50258 - ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow CVE-2024-53042 - ALSA:...
CVE-2026-44283
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user...
CVE-2026-44283
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user...
CVE-2026-44283
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user...
CVE-2026-44283 etcd: Read access via PrevKv in etcd transactions may bypass RBAC authorization checks
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user...
CVE-2026-44283
etcd is a distributed key-value store for the data of a distributed system. Prior to 3.4.44, 3.5.30, and 3.6.11, a vulnerability in etcd allows read access via PrevKv, or lease attachment in Put requests within transaction operations, to bypass RBAC authorization checks. An authenticated user...
WS-2017-3778
FILE CVS in versions FILE417 to FILE531 is vulnerable to use-of-uninitialized-value in mcopy, related to src/softmagic.c...
WS-2019-0567
curl in versions curl-7340 to curl-7653 is vulnerable to Use-of-uninitialized-value in smtpstateehloresp, related to lib/smtp.c...
Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure.
A flaw was found in Spring Boot. The $random.value property source utilizes a weak pseudo-random number generator PRNG, meaning the values it produces are not sufficiently random for use as cryptographic secrets. An attacker could potentially predict these values, which may lead to information...
WS-2019-0559
libxslt before v1.1.34-rc2 is vulnerable to use-of-uninitialized-value in xmlStrlen...
WS-2020-0372
GnuTLS before 3.6.13 is vulnerable to use-of-uninitialized-value in printcrl...
WS-2020-0367
jbig2dec in versions 0.12 to 0.18 is vulnerable to Use-of-uninitialized-value, related to jbig2text.c...
WS-2019-0513
International Components for Unicode ICU for C/C++ before 68.1 has a use of uninitialized value in isMatchAtCPBoundary in icu4c/source/common/ustring.cpp...
CVE-2026-6575
Buffer over-read in PostgreSQL function pgrestoreattributestats accepts array values of unmatched length, which causes query planning to read past end of one array. This allows a table maintainer to infer memory values past that array end. Within major version 18, minor versions before PostgreSQL...
WS-2019-0293
Vant before 2.1.8 is vulnerable to Cross-Site Scripting. The text value of the Picker component column is not sanitized, which may allow attackers to execute arbitrary JavaScript in a victim's browser...
WS-2019-0259
In vant, versions prior to 2.1.8 are vulnerable to Cross-Site Scripting. The text value of the Picker component column isn't sanitized. this may lead attackers to execute arbitrary JavaScript in the victim's browser...