491673 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-80430
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program...
PT-2026-120718
Name of the Vulnerable Software and Affected Versions Storybook versions 8.0.0 through 8.6.18 Storybook versions 9.0.0 through 9.1.20 Storybook versions 10.0.0 through 10.6.1 Storybook versions 11.0.0-alpha.0 through 11.0.0-alpha.5 Description Insufficient iframe embedding and message-origin...
InterestGroups Component Compromise Protected Information
The vulnerability in the InterestGroups component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted PDF file...
WebAuthn Component DoS
The WebAuthn component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted PDF file...
Siemens Software Center Uncontrolled Search Path Code Execution
The vulnerability of the software for loading, installing, and activating Siemens Software Center is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code with elevated privileges using a specially created DLL file...
PT-2026-122483
Уязвимость микропрограммного обеспечения шлюза Cisco Expressway связана с неограниченной загрузкой файлов опасного типа. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на целостность и доступность защищаемой информации...
CVE-2025-60479
The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a NULL pointer dereference within the StatSFVec2f function located in /scene_manager/scene_stats.c. This flaw allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted MPEG-4 fil...
CVE-2025-60497
The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a segmentation violation in the GetESD function located at /isomedia/track.c. An attacker can exploit this flaw by supplying a crafted MP4 file to cause a Denial of Service (DoS) . The vulnerability is categor...
CVE-2025-71438
An out-of-bounds read vulnerability exists in the gf_odf_ac4_cfg_dsi_v1 function (located in /odf/descriptors.c) of the GPAC Project/MP4Box software before version v26.07.0 . An attacker can exploit this flaw by providing a crafted AC4 file to trigger a Denial of Service (DoS) . While the vulnera...
CVE-2025-60491
A heap use-after-free vulnerability exists in the dasher_flush_segment function (located in /filters/dasher.c) of GPAC Project/MP4Box versions before 2.5 . This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted MP4 file . While the vulnerability is documented as ...
CVE-2025-60478
The GPAC Project/MP4Box software (versions before 2.5 ) is vulnerable to a use-after-free flaw located in the gf_filter_packet_destroy function within /filter_core/filter_pck.c. An attacker can exploit this vulnerability by supplying a crafted MPEG-2 file to cause a Denial of Service (DoS) . Whil...
Cisco FTD: CVE-2026-76489: Multiple Cisco Products Snort 3 Denial of Service Vulnerabilities
Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to...
Red Hat: CVE-2026-114236: podman: Goroutine/file-descriptor leak in storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer on malformed layers
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process’ file descriptor limit...
ROS-20261021-73-0017
The vulnerability in Tar is related to the unlimited loading of dangerous types of files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-71438
An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
EUVD-2025-211159
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
EUVD-2025-211161
A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
EUVD-2025-211164
A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...