372455 matches found
UBUNTU-CVE-2026-112307
sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...
api-automation-kit (>=0.2.0, <=0.7.0), appian-locust (>=2.0.0a2, <=2.25.0) +14 more potentially affected by CVE-2026-111883 via locust (>=2.0.0, <=2.46.6)
locust PYPI version =2.0.0, =0.2.0, =2.0.0a2, =0.0.7.0, =2.4.0, =1.0.5, =0.1.4, =1.2.6, =0.0.2, =1.0.50, =1.0.4, =0.1.1, =1.0.0, =1.4.34 and more Source cves: CVE-2026-111883 Source advisory: SNYK:PYTHON-LOCUST-21431597...
Dave Beckett Raptor RDF Syntax Library Buffer Error Vulnerability
The Dave Beckett Raptor RDF Syntax Library version 2.0.15 to 2.0.16 has a buffer error vulnerability. This vulnerability stems from the raptornewtermfromcountedliteral function, which truncates the length of language tags to unsigned char values. This leads to a heap buffer overflow. An attacker...
Oracle Application Object Library security vulnerabilities
Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the DB Privileges component, which may allow low-privilege attackers to log in and perform infrastructure takeover attacks on the Oracle Application Object...
Apple Xcode security vulnerabilities
Versions of Apple Xcode prior to Xcode 27 contain security vulnerabilities. These vulnerabilities stem from the lack of forced library verification for affected binary files, which may allow applications to bypass the sandbox...
Apple Xcode Software Supply Chain Vulnerabilities
Versions of Apple Xcode prior to Xcode 27 contained vulnerabilities related to the software supply chain. These vulnerabilities stemmed from the failure to perform library validation on affected binary files, which could allow malicious applications to escape the sandbox...
Oracle Application Object Library security vulnerability
A security vulnerability exists in Oracle Application Object Library versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Flexfields component; attackers with low privileges can exploit it via HTTP access, potentially leading to the takeover of the Oracle Application...
Oracle Application Object Library security vulnerabilities
The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core components. Unauthorized attackers may gain access via the HTTP network. Without interaction with authorized personnel, they may create, delete...
Oracle Application Object Library Authorization Vulnerability
The Oracle Application Object Library versions 12.2.3 through 12.2.15 have an authorization issue vulnerability. This vulnerability stems from Core component problems and could allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...
Oracle Application Object Library security vulnerabilities
Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the DB Privileges component, which may allow low-privilege attackers to log in and execute infrastructure tasks, thereby taking control of the Oracle...
Oracle Application Object Library security vulnerabilities
The Oracle Application Object Library versions 12.2.3 through 12.2.15 have security vulnerabilities. These vulnerabilities stem from issues with the Core component, which may allow unauthenticated attackers to gain control of the Oracle Application Object Library through HTTP network access...
Google Chrome buffer error vulnerability
Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds read in the ANGLE library, which could allow remote attackers to access memory within the sandbox through a specially crafted HTML page...
CLSA-2026-1792424891 TuxCare security update for dompurify (13 CVEs)
TuxCare rebuilt dompurify to address 13 CVEs. Fixed in 2.3.10-tuxcare.3...
CLSA-2026-1792424449 TuxCare security update for dompurify (13 CVEs)
TuxCare rebuilt dompurify to address 13 CVEs. Fixed in 2.3.3-tuxcare.3...
CLSA-2026-1792424339 TuxCare security update for dompurify (10 CVEs)
TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 2.0.8-tuxcare.3...
MAL-2026-17954 Malicious code in a-lbum-do-wnload-avai-lable-file-11522-seven-and-the-ragged-tiger-bkmqg-xorids (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff887d27322671592352c1e6755c4c39bc7be6f1bbb2148dc69ce2d3018a63e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-18023 Malicious code in mp3-do-wnload-file-to-day-27091-usa-united-state-of-atlanta-xoisl-pqpsio (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87c9d9e58745706fee426791a737ac7812546f610fffa36157578214e4e878ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
agentfoundry (1.2.9.1), ai4rag (>=0.7.0, <=0.10.4) +23 more potentially affected by CVE-2026-112310 via docling-core (>=2.9.0, <=2.102.0)
docling-core PYPI version =2.9.0, =0.7.0, =0.1.0, =2.89.0, =0.19.2, =0.14.1, =1.40.0, =0.6.2, =2.0.0, =0.2.1, =1.0.1, =1.0.17 and more Source cves: CVE-2026-112310 Source advisory: MEND:CVE-2026-112310...