1251406 matches found
CVE-2026-73153
A flaw was found in svxlink's EchoLink implementation. An out-of-bounds read in the RTCP/SDES packet handling allows a pre-authentication remote attacker to read beyond buffer boundaries via crafted UDP packets, potentially leading to information disclosure or a crash. Mitigation Update svxlink t...
CVE-2026-73149
A flaw was found in svxlink's NetRx component. An unvalidated MsgAudio length field allows a remote attacker to trigger an out-of-bounds read beyond buffer boundaries, potentially leading to information disclosure or a crash. Mitigation Update svxlink to version 26.05.1 or later...
CVE-2026-10579 Picketlink-federation: auth bypass in picketlink saml unsolicited-response
A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted...
CVE-2026-10579
CVE-2026-10579 affects PicketLink Federation SAML. The flaw: the unsolcited response handler accepts forged SAML assertions without verification, enabling an unauthenticated attacker to impersonate any principal in any role, with possible information disclosure or access to restricted operations....
CVE-2026-73140
Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...
CVE-2026-41115
A flaw was found in Apache Kafka. An improper authorization vulnerability exists in the CONSUMERGROUPDESCRIBE API, where it incorrectly validates the DESCRIBE operation instead of the READ operation on the GROUP resource. This discrepancy can lead to misconfigured Access Control Lists ACLs,...
WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Foton Core versions = 1.1.1...
CVE-2026-73140
Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...
CVE-2026-73140
The CVE-2026-73140 issue affects cti-transmute: build_evaluation_report() exported evaluation reports without applying access controls to evaluation comments, allowing a user who can view a conversion to export Markdown/PDF reports containing private comments and the comment author’s name. The ro...
EUVD-2026-55970
Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...
CVE-2026-73140 cti-transmute Evaluation Report Exports Expose Private Comments and Author Information
Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownership, authorship, and administrative privileges,...
WordPress Stream – Activity Log & Audit Trail plugin <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability
Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by Yat in WordPress Plugin Stream versions = 4.2.0...
CVE-2026-11985
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-10025
creationtimestamp| type| source ---|---|--- 2026-08-11 05:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3msrtsmtjth2x...
CVE-2026-11985
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-11985 Cross-thread FPU register leak on ARM when FPU enabled without register sharing
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
EUVD-2026-55936
On the Zephyr ARM port, enabling the hardware FPU CONFIGFPU forces the "Floating point ABI" choice, which defaults to CONFIGFPHARDABI. Both FPHARDABI and FPSOFTABI permit the compiler to emit hardware FP instructions in any function, even code that never uses floating-point types. However, the...
CVE-2026-11985
CVE-2026-11985 describes a cross-thread information leak on the Zephyr ARM port when the hardware FPU is enabled (CONFIG_FPU) but FPU register sharing is disabled. With default FP_ABI (FP_HARDABI) or FP_SOFTABI, FP instructions can be emitted in any function, while callee-saved FP registers (s16-...
CVE-2026-51583
creationtimestamp| type| source ---|---|--- 2026-08-11 04:54:29+00:00| seen| https://gist.github.com/seiyaibuki0523/d8af15eb555808319a2633269a9ebb80 2026-08-11 15:00:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dnjjgpnninjk4...
CVE-2026-8917
creationtimestamp| type| source ---|---|--- 2026-08-11 03:09:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gq4s6uzcwa454 2026-08-11 19:02:37+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117078422749026103 2026-08-12 14:05:18+00:00| seen|...