CVE-2026-3950: Out-of-bounds Read

A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and...

libheif 缓冲区错误漏洞

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of Struktur that include LibHEIF 1.21.2 and earlier contain a buffer error vulnerability. This vulnerability stems from incorrect operations in the Track::load function with...

GHSA-WJ89-2385-GPX3 Craft Commerce has stored XSS in Inventory Location Name

Summary A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript. This XSS triggers when an administrator or user with product editing permissions creates or...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, druid, cassandra-reaper, zookeeper, trino, solr, akhq, dependency-track, kafka, spark, confluent-kafka, apache-tika...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, druid, cassandra-reaper, zookeeper, trino, solr, akhq, dependency-track, kafka, spark, confluent-kafka, apache-tika...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: spark, spark-kubernetes-operator, wso2is, apache-tika, druid, kafka-fips, neo4j, pinot-fips, pinot, reposilite, zookeeper-fips, dependency-track, automq-fips, zaproxy, celeborn, apache-hop, hadoop-fips, trino, kafka, automq, dependency-track-apiserver, confluent-kafk...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: spark, spark-kubernetes-operator, wso2is, apache-tika, druid, kafka-fips, neo4j, pinot-fips, pinot, reposilite, zookeeper-fips, dependency-track, automq-fips, zaproxy, celeborn, apache-hop, hadoop-fips, trino, kafka, automq, dependency-track-apiserver, confluent-kafk...

PT-2026-24640

Summary A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript. This XSS triggers when an administrator or user with product editing permissions creates or...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: apache-pulsar, celeborn, infinispan, solr, wavefront-proxy, jenkins-plugin-manager, nextflow, thingsboard, wildfly, cassandra, airflow, druid, neo4j, gradle, akhq, dependency-track, kafka, apache-tika, spdx-tools-java, cass-config-builder, flyway, logstash, sonarqube...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: logstash, conductor, conductor-fips, spark-kubernetes-operator, flyway-fips, wso2is, apache-tika, infinispan, druid, kafka-fips, neo4j, camunda, pinot, ruby3.4-jrjackson, s3proxy-fips, knative-kafka-broker, zipkin, ruby4.0-jrjackson, trino, wavefront-proxy,...

PT-2026-24799

Name of the Vulnerable Software and Affected Versions strukturag libheif versions up to 1.21.2 Description A flaw exists in strukturag libheif, specifically within the Track::load function located in the libheif/sequences/track.cc file, related to the stsz/stts component. This can lead to an...

CVE-2026-1219

CVE-2026-1219 affects the WordPress plugin MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar. Versions 4.0–5.10 are exposed to an Insecure Direct Object Reference via load_track_note_ajax due to missing validation on a user-controlled key, allowing unauthenticated access to privat...

PT-2026-20776

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 4.0 to 5.10 via the 'load track note ajax' due to missing validation on a user controlled key. This makes it possible for unauthenticated...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries

Overview The installer of M-Track Duo HD provided by M-Audio contains the following vulnerability with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-25676 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc...

CVE-2026-25676

CVE-2026-25676 affects the M-Track Duo HD installer (version 1.0.0). The issue arises from insecure DLL search path handling, which may allow loading of arbitrary DLLs and lead to code execution with administrator privileges. The description does not specify affected products beyond this installe...

PT-2026-7817

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

M-Audio M-Track Duo HD 代码问题漏洞

The M-Audio M-Track Duo HD is an entry-level sound card device from M-Audio. The version 1.0.0 of the M-Audio M-Track Duo HD has a code vulnerability. This vulnerability stems from issues with the DLL search path in the installer, which may allow arbitrary code to be executed with administrator...

CVE-2026-25676: Uncontrolled Search Path Element

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...