58964 matches found
CVE-2026-25283
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...
CVE-2026-25290 Integer Overflow or Wraparound in OOBM
Memory Corruption when validating large data buffers from external sources using addition to check buffer length...
EUVD-2026-81332
Memory Corruption when validating large data buffers from external sources using addition to check buffer length...
CVE-2026-25283
CVE-2026-25283 is a stack-based buffer overflow in OOBM , a component maintained by Qualcomm . The vulnerability is caused by memory corruption when unverified data from an external source is copied into a buffer larger than the allocated size. The CNA-assigned CVSS 3.1 score is 8.8 (HIGH) with a...
CVE-2026-25283 Stack-based Buffer Overflow in OOBM
Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...
PT-2026-95044
External-authentication account takeover: external login linked to a pre-existing account by email without requiring verification Package: @vendure/core vendure-ecommerce/vendure, latest master · !IMPORTANT This vulnerability only affects deployments that use external / social authentication an...
Linux Distros Unpatched Vulnerability : CVE-2026-19607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a...
CVE-2026-50158: External Control of File Name or Path
yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download MCP tool accepts a caller-controlled file parameter through cmd/caption/download.go and passes it to Caption.Download in pkg/caption/caption.go, where os.Create creates or truncates that...
CVE-2026-76427 Cisco ISE XML External Entity Injection Vulnerability
A vulnerability in the offline profiler feed service of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files that are stored on an affected device. This vulnerability is due to the parsing of attacker-controlled feed metadata with an XML parser that does not disable...
CVE-2026-20242
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
EUVD-2026-81109
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
CVE-2026-20242
CVE-2026-20242 affects the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software . The root cause is insecure deserialization of a user-supplied Java byte stream. An unauthenticated, remote attacker who controls a host in the configured external database acces...
CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
GO-2026-6446 LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper
LF Edge eKuiper: Self-XSS in External Service Creation in github.com/lf-edge/ekuiper...
GO-2026-6447 LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper
LF Edge eKuiper: SSRF in External Service in github.com/lf-edge/ekuiper...
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device. This vulnerability is due to insecure deserialization of a user-supplied Jav...
keycloak-services: keycloak-services: Broker-originated username collision causes account lockout
A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...
CVE-2026-92355
In affected versions of Octopus Server, a user with permission to modify non built-in external feeds could exploit a path traversal flaw to overwrite arbitrary files on the server, which in some configurations could lead to remote code execution...