69572 matches found
ROS-20260327-73-0003
A vulnerability in the expand function of the juliangruber/brace-expansion library of the Node.js software platform involves uncontrolled resource consumption. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
PT-2026-53870
Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description An out-of-bounds read of 2 bytes can occur in the g date time get ymd function within the glib/gdatetime.c file. This happens when the system processes an invalid GDateTime object created by the...
PT-2026-28587
Name of the Vulnerable Software and Affected Versions Locutus versions prior to 3.0.25 Description The unserialize function in locutus/php/var/unserialize assigns deserialized keys to plain objects via bracket notation without filtering the proto key. When a PHP serialized payload contains proto ...
PT-2026-28683
A flaw has been found in OpenBMB XAgent 1.0.0. The impacted element is the function FunctionHandler.handle tool call of the file XAgent/function handler.py of the component API Key Handler. This manipulation of the argument api key causes sensitive information in log files. The attack may be...
PT-2026-28710
Name of the Vulnerable Software and Affected Versions wandb OpenUI versions up to 1.0 Description A flaw exists in wandb OpenUI, specifically within the HTMLAnnotator component. The issue resides in the create share/get share function located in the backend/openui/server.py file. Manipulation of...
Linux Kernel DRI DoS
The vulnerability of the mipidsiremovedevicefn function in the drivers/gpu/drm/drmmipidsi.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the execution of a loop with an unreachable exit condition “Infinite loop”. Exploiting this vulnerabilit...
Linux kernel trace ring buffer overflow DoS
The vulnerability of the rbresetcpu function in the kernel/trace/ringbuffer.c module, which supports Linux kernel tracing, is related to an infinite loop. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
Linux kernel DRI intel_gvtdebugfs_add_vgpu Heap Buffer Overflow DoS
The vulnerability of the intelgvtdebugfsaddvgpu function in the drivers/gpu/drm/i915/gvt/debugfs.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the...
Go File ReadDir Unauthorized Access
The vulnerability of the File.ReadDir and File.Readdir functions in the Go programming language is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information...
CVE-2025-36440
IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to missing function level access control...
EUVD-2026-16379
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...
CVE-2026-3527
Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...
AZL-81092 CVE-2026-0967 affecting package libssh for versions less than 0.10.6-7
A flaw was found in libssh. A remote attacker, by controlling client configuration files or knownhosts files, could craft specific hostnames that when processed by the matchpattern function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion,...
CVE-2026-33622 A PinchTab Security Policy Bypass in /wait Allows Arbitrary JavaScript Execution
PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser. PinchTab v0.8.3 through v0.8.5 allow arbitrary JavaScript execution through POST /wait and POST /tabs/id/wait when the request uses fn mode, even if security.allowEvaluate is disabled. POST /evaluate...
CVE-2026-33545
MobSF is a mobile application security testing tool used. Prior to version 4.4.6, MobSF's readsqlite function in mobsf/MobSF/utils.py lines 542-566 uses Python string formatting % to construct SQL queries with table names read from a SQLite database's sqlitemaster table. When a security analyst...
DEBIAN-CVE-2026-32287
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...
DEBIAN-CVE-2026-32285
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...
CVE-2026-32285
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...
UBUNTU-CVE-2026-32285
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...
CVE-2026-32285
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...