68765 matches found
CVE-2026-39042
An issue in MikroTIk SIA Mikrotikls, Latvia RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten function in libumsg.so...
CVE-2026-39042
A vulnerability in MikroTik RouterOS (versions 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 ) allows a remote attacker to cause a denial of service . The root cause is located in the unflatten() function within the libumsg.so library. While the vulnerability is confirmed, no specific exploit...
CVE-2026-39042
An issue in MikroTIk SIA Mikrotikls, Latvia RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten function in libumsg.so...
PT-2026-59652
Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validate plugin code function in plugin system.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolve name helper...
PT-2026-57649
A vulnerability was determined in Shibby Tomato up to 1.28.0000. Affected is the function getupsvar of the file www/apcupsd/tomatodata.cgi of the component apcupsd. This manipulation of the argument Field causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has be...
PT-2026-59924
Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. Patches We have patched the issue in GitHub commit...
PT-2026-79475
Name of the Vulnerable Software and Affected Versions JSONata versions prior to 1.8.8 JSONata versions prior to 2.2.0 Description The lookup function in src/functions.js lacks an Object.prototype.hasOwnProperty check, allowing crafted expressions to access inherited prototype members. An attacker...
PT-2026-59355
Channel Access Grants Bypass filter allowed access grants Affected Component Channel creation and update endpoints: - backend/open webui/routers/channels.py lines 291-340, create new channel - backend/open webui/routers/channels.py lines 617-638, update channel by id - backend/open...
PT-2026-57616
Name of the Vulnerable Software and Affected Versions pyod versions 3.5.0 through 3.5.2 Description A deserialization flaw exists in the pyod.utils.persistence.load function within the pyod/utils/persistence.py file. The issue occurs because joblib.load is executed before any envelope validation,...
PT-2026-59778
Impact The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. Patches We have patched the issue in GitHub commit...
PT-2026-57921
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Path Handler. The manipulation results in improperly controlled modification of object prototype attributes. The attack ma...
ROS-20260713-73-0049
The vulnerability of the Repo.clonefrom, Remote.fetch, Remote.pull, and Remote.push functions in the GitPython library for interacting with git repositories is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to...
PT-2026-57910
An issue in MikroTIk SIA Mikrotikls, Latvia RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten function in libumsg.so...
PT-2026-57914
A security vulnerability has been detected in wandb 0.25.2.dev1. Affected is the function ArtifactManifestEntry.download in the library wandb/sdk/lib/hashutil.py of the component Artifact Integrity Validation. The manipulation leads to use of weak hash. The attack may be initiated remotely. A hig...
PT-2026-59623
A path traversal and arbitrary file write vulnerability exist in the embedded get function in ' main .py' in PyMuPDF version, 1.26.5...
CVE-2026-39042
An issue in MikroTIk SIA Mikrotikls, Latvia RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allows a remote attacker to cause a denial of service via the unflatten function in libumsg.so...
PT-2026-59827
Impact When mlir::tfg::ConvertGenericFunctionToFunctionDef is given empty function attributes, it crashes. cpp // We pre-allocate the array of operands and populate it using the // output name to position and control output to position populated // previously. SmallVector ret valsfunc.ret size +...
PT-2026-59150
A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function api generate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...
Linux Distros Unpatched Vulnerability : CVE-2026-40469
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow vulnerability has been found in builtin.c program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and...
PT-2026-59557
Summary passthrough and apassthrough in praisonai accept a caller-controlled api base parameter that is concatenated with endpoint and passed directly to httpx.Client.request when the litellm primary path raises AttributeError. No URL scheme validation, private IP filtering, or domain allowlist i...