66643 matches found
The vulnerability of the gncmbind() function in the drivers/usb/gadget/legacy/ncm.c module of the Linux USB device driver allows a hacker to cause a service failure.
The vulnerability of the gncmbind function in the drivers/usb/gadget/legacy/ncm.c module of the Linux USB device driver lies in the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
ROS-20260831-73-0015
The vulnerability of the metaphone function ext/standard/metaphone.c in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to trigger segmentation errors and cause service failures...
CVE-2026-82587
CVE-2026-82587 affects Open5GS versions up to 2.7.7 , specifically the AMF component in the file src/amf/namf-handler.c. The vulnerable function is amf_namf_comm_decode_ue_mm_context_list , where manipulation of the argument ueContext.mmContextList[*].allowedNssai causes memory corruption . The a...
CVE-2026-82556
A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...
CVE-2026-82644
WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...
CVE-2026-82644 WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent
WWBN AVideo current e01e41ecc and earlier contains a brute-force rate limiting bypass in enforceRateLimit, which protects login.json.php and 13 other endpoints. The function stores its attempt counter via a cache layer ObjectYPT::setCacheGlobal that silently discards writes for any client...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
EUVD-2026-68212
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
CVE-2026-82636
Qubes OS (specifically qubes-core-dom0-linux before 4.3.22 ) is vulnerable to OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube. The root cause is the use of the system() library function in core-admin-linux/file-copy-vm/qfile-dom0-agent.c to process an er...
CVE-2026-82636
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
CVE-2026-78691 Unescaped backslash allows LIKE wildcard injection in AshSql string search
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...
CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
A vulnerability was identified in NASA cFS up to 7.0.1. Impacted is the function OSread of the file modules/protocol/tcp/fsw/src/sbntcpif.c of the component SBN TCP Module. Such manipulation of the argument MsgSz leads to buffer overflow. The attack must be carried out from within the local...
Uncaught Exception
Overview qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to Uncaught Exception in the isBuffer function in lib/utils.js, which calls obj.constructor.isBufferobj without checking that it is callable, reached from...
Uncaught Exception
Overview org.webjars.npm:qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to Uncaught Exception in the isBuffer function in lib/utils.js, which calls obj.constructor.isBufferobj without checking that it is callable,...
PT-2026-83584
Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.12 Description Broken access control in profile function.php allows authenticated users with low privileges to view the future role memberships of other users. This is achieved by bypassing profile-level...
PT-2026-83556
Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...
PT-2026-83623
A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/is migrate allowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be...
CVE-2026-82417
CVE-2026-82417 is a synchronous crash in the qs query-string library (Node.js). utils.isBuffer in lib/utils.js duck-types Buffer objects by invoking obj.constructor.isBuffer(obj) after only a truthy check, so any object carrying its own constructor property with a truthy, non-callable isBuffer me...
