490102 matches found
CVE-2026-75803 affecting package edk2 for versions less than 20240524git3e722403cd16-19
CVE-2026-75803 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...
CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19
CVE-2026-63076 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5
CVE-2026-17106 affecting package docker-cli for versions less than 25.0.7-5. A patched version of the package is available...
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20
CVE-2026-17106 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...
OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
Summary The @typespec/openapi3 emitter retains the value of a @versioned enum member and interpolates it into the output filename as version without sanitizing path separators or traversal components. The completed path reaches the compiler's emitFile, which creates the parent directory and write...
CVE-2026-78738
Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
EUVD-2026-74051
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
CVE-2026-82537 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
CVE-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
GHSA-57V5-WQX3-CGJ4 SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews
Scope note please read first This endpoint does not exist in v3.7.3 or on master. It was introduced on the development branch by commit acfc02ee8 "Improve database field visibility across views", 11020 and is live on v3.7.4-alpha.1, so it will ship in v3.7.4 unless gated first. No released stable...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
A flaw was found in the Python 'stringprep' module. This module incorrectly processed characters by using the latest Unicode codepoint attributes instead of the Unicode 3.2.0 standard specified in RFC 3454. This deviation can lead to mismatches when processing internationalized domain names IDNA...
2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5122876)
2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5122876...
2026-09 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems KB5122878...