203288 matches found
CVE-2026-63171 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...
CVE-2026-63171
Omnispace Agora Project versions prior to 26.10.0 are susceptible to a stored cross-site scripting (XSS) vulnerability. The root cause lies in the HTMLPurifier configuration , which preserves double-quote characters, allowing authenticated attackers to submit a crafted forum category description ...
CVE-2026-63171 Omnispace Agora Project < 26.10.0 Stored XSS via Category Description
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted forum category description containing a double-quote character that breaks out of an HTML input value attribute...
BIT-ELASTICSEARCH-2026-103005 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an...
CVE-2026-108942 philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting
A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...
PT-2026-111336
Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an...
CVE-2026-109352
LibreNMS versions prior to 26.9.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in includes/html/pages/device/wireless.inc.php. The root cause is the lack of proper output escaping when the application echoes sensor_descr values, which are populated from SNMP Display...
CVE-2026-108094
A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wpimagedescriptionv1 resource while an asynchronous ICC file read is still in progress. When the read completes, the composit...
CVE-2026-108094
A use-after-free vulnerability exists in mutter within the Wayland color-management ICC image-description path. A local attacker running a malicious Wayland client can trigger this by destroying a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. Upon comp...
Elasticsearch 8.12.x < 8.19.23 / 9.3.x / 9.3.8 / 9.4.0 < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-195)
The version of Elasticsearch installed on the remote host is prior to 8.19.23, 9.4.8, or 9.5.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-195 advisory. - Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via...
CVE-2026-107391
music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor fr...
CVE-2026-107391 music-metadata: MP4 stsd sample-entry size==0 causes a synchronous infinite loop (DoS) — unreleased regression on master
music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor fr...
CVE-2026-107391
The music-metadata library (NPM) versions >=11.0.0 and
CVE-2026-107391: Uncontrolled Resource Consumption
music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sample-description parser allows an attacker-controlled sample-entry size of zero to prevent the StsdAtom.get cursor fr...
PT-2026-108171
Name of the Vulnerable Software and Affected Versions music-metadata versions 11.14.1 through 11.15.x Description A regression in the MP4 stsd sample-description parser allows a crafted MP4-family input to cause a denial of service. By providing a sample-entry size of zero and a specific entry...
CVE-2026-1403
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file...
CVE-2026-107278 MISP Object Sync Drops Objects and Attributes When Description Is Empty
MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance's validatio...
CVE-2026-107278 MISP Object Sync Drops Objects and Attributes When Description Is Empty
MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. However, when that object is replicated to another MISP instance via the sync mechanism, the receiving instance's validatio...
DEBIAN-CVE-2026-46572
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsibcuttail in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory...
DEBIAN-CVE-2026-46571
In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...