209877 matches found
CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
UBUNTU-CVE-2026-38345
A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...
UBUNTU-CVE-2026-38347
A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-38350
An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
UBUNTU-CVE-2026-38350
An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
PT-2026-83132
Name of the Vulnerable Software and Affected Versions Akilli Ticaret Software Technologies Ltd. E-Commerce Pack versions 4.5.001 through 28082026 Description Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting XSS, a condition where malicious scripts...
PT-2026-82887
The Breeze Cache WordPress plugin before 2.5.13 does not sanitise a value taken from the request before using it to build the paths of the files it caches, allowing unauthenticated attackers to create files at arbitrary locations on the server, outside the intended cache directory...
PT-2026-83151
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine allows Reflected XSS. This issue affects JetEngine: from n/a through 3.8.14.2...
CVE-2026-38638
The relibc library, specifically commit 61f42d , contains a vulnerability in the with_argv function located at /unistd/mod.rs. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . While specific exploit links are not provided in the documents, a proof-o...
EUVD-2026-67769
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-37751
The 23blocks-OS ai-maestro version v0.24.17 is affected by an OS command injection vulnerability within the killSessionSync function located in lib/agent-runtime.ts . This flaw allows an attacker to execute arbitrary commands by providing a crafted input . While the vulnerability is confirmed, th...
PT-2026-83265
Name of the Vulnerable Software and Affected Versions Microsoft Edge for iOS affected versions not specified Description Improper neutralization of input used for Large Language Model LLM prompting allows an unauthorized attacker to perform spoofing over a network. LLM prompting refers to the...
CVE-2026-38638
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...
Cisco Catalyst SD-WAN Configuration Input Compromise
The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
Linux x86 KVM Heap Buffer Overflow DoS
The vulnerability of the vcpublock function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 architecture of the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability could allow an attacker to cause a service...
Adobe Campaign Classic Code Execution
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
HPLIP Printer Driver DoS
The vulnerability of HPLIP printer drivers is related to the lack of measures taken to clean incoming data. Exploiting this vulnerability can allow an attacker to cause service failures...
Firefox Thunderbird Confidential Data Access
The vulnerability of the Engine component in web browsers such as Firefox and Firefox ESR, as well as in the Thunderbird email client, is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-81524
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driv...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: velocity (UTSA-2024-005626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005626 advisory. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account runnin...