CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +78 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =3.12.0, =3.12.0, =3.12.0, =3.14.3 and more Source cves: CVE-2026-49364 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20159296...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1094 more potentially affected by CVE-2026-49364 via org.apache.activemq:artemis-core-client (>=1.0.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-49364 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-20159298...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection handshake. An attacker can obtain administrative credentials by capturing network traffic during the handshake. Remediation Upgrade...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection...

CVE-2026-44950

CVE-2026-44950 is a heap buffer overflow in the libXfont2 font-server client (fs_read_glyphs() in src/fc/fserve.c). The function validates each glyph's source slice individually but never checks whether the cumulative destination offset exceeds the allocated buffer size. A malicious font server c...

CVE-2026-44950

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice position, length lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the...

CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

EUVD-2026-75300

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

CVE-2026-59679

fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...

CVE-2026-81635

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...

CVE-2026-81635

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product...

EUVD-2026-75264

The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not scope its second-factor attempt limit to the account being attacked, keying it instead to an identifier the client supplies and can change at will, allowing an attacker who already knows a...

server v1.0.1

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

PocketCinema

PocketCinema for Miyoo Mini Plus A lightweight Stremio-style...

SaltStack <=3002 - Shell Injection

SaltStack Salt through 3002 allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt-API using the SSH client. id: CVE-2020-16846 info: name: SaltStack =3003 to mitigate this vulnerability. reference: -...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +78 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =3.12.0, =3.12.0, =3.12.0, =3.14.3 and more Source cves: CVE-2026-49364 Source advisory: MEND:CVE-2026-49364...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +1094 more potentially affected by CVE-2026-49364 via org.apache.activemq:artemis-core-client (>=1.0.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-49364 Source advisory: MEND:CVE-2026-49364...

com.datomic:peer (>=1.0.7705, <=1.0.7745), com.viglet.core:viglet-core-messaging (>=2026.3.10, <=2026.3.13) +78 more potentially affected by CVE-2026-57822 via org.apache.artemis:artemis-core-client (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-core-client MAVEN version =2.50.0, =1.0.7705, =2026.3.10, =0.29.0, =4.1.6, =9.0.13, =5.5.2, =5.5.2, =5.5.2, =5.5.2, =9.0.13, =9.0.13, =1.6.0, =3.12.0, =3.12.0, =3.12.0, =3.14.3 and more Source cves: CVE-2026-57822 Source advisory: MEND:CVE-2026-57822...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1, <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3, <=1.0.5) +989 more potentially affected by CVE-2026-57822 via org.apache.activemq:artemis-core-client (>=1.3.0, <=2.53.0)

org.apache.activemq:artemis-core-client MAVEN version =1.3.0, =1.0.1, =1.0.3, =5.0.9, =6.0.0m1, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =1.2 and more Source cves: CVE-2026-57822 Source advisory: MEND:CVE-2026-57822...