DEBIAN-CVE-2026-19389

Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...

CVE-2026-13701: Improper Neutralization of Input During Web Page Generation

The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators including those without the unfilteredhtml capability, such as on multisite to perform Stored Cross-Site Scripting...

CVE-2026-19074: Exposure of Sensitive Information to an Unauthorized Actor

The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 = 3.4.2 is vulnerable to unauthenticated sensitive information exposure via the AJAX action acadppubliccustomfieldslistings...

PT-2026-69380

Name of the Vulnerable Software and Affected Versions Advanced Classifieds & Directory Pro versions prior to 3.4.3 Description An issue allows unauthenticated users to expose sensitive information through the AJAX action acadp public custom fields listings. This leads to the disclosure of...

PT-2026-69339

Name of the Vulnerable Software and Affected Versions Advanced Excerpt WordPress plugin versions prior to 4.5 Description Stored Cross-Site Scripting XSS occurs because the plugin fails to sanitize and escape a settings value before it is rendered on the site front end. This allows administrators...

Vulnerability of the prepare_form() function in the acfe_module_form_front.render plugin: This vulnerability allows a hacker to execute arbitrary code.

Vulnerability of the prepareform function in the acfemoduleformfront.render method of the Advanced Custom Fields plugin: This vulnerability is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2026-19330

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

CVE-2026-19330 angrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

EUVD-2026-54863

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

CVE-2026-19330

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

CVE-2026-19330

The CVE concerns angrysky56 advanced-reasoning-mcp 1.0.0, specifically the file src/index.ts where the functions create_system_json and create_library are used to get_system_json and switch_memory_library. The issue is a path traversal caused by manipulation of these elements. Reported as requiri...

CVE-2026-19330 angrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

CVE-2026-19330: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was...

PT-2026-69254

Name of the Vulnerable Software and Affected Versions angrysky56 advanced-reasoning-mcp version 1.0.0 Description A path traversal issue exists in the file src/index.ts within the functions create system json, create library, get system json, and switch memory library. Path traversal is a flaw th...

TONTOU: On the Exploitability of Time-of-Neutralization to Time-of-Use Windows

Recently deployed Spectre v2 mitigations neutralize branch predictor state when switching privilege contexts or immediately prior to indirect branch execution, either through domain isolation or sanitization. These defenses assume that subsequent branch predictor behavior remains free from attack...

CVE-2026-66678

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-66439

Unauthenticated Cross Site Scripting XSS in Advanced AJAX Product Filters = 3.2.0.3 versions...

CVE-2026-66678

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

EUVD-2026-53892

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...

CVE-2026-66678 WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability

Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field = 6.1.1 versions...