8716 matches found
CVE-2026-64548
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in bpfmsgpushdata When the scatterlist ring is full or nearly full, bpfmsgpushdata enters a copy fallback path and computes copy + len for the page allocation size. Since len comes from...
DEBIAN-CVE-2026-45623
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. In versions 8.5.11 and prior, the PreviousMap parses the / sourceMappingURL=PATH / comment from any CSS string passed to process and dereferences PATH against the...
GO-2026-5048 Denial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
The Avro map decoder accepts attacker-controlled block-element counts from the wire format and grows the destination map without enforcing an upper bound. A producer can declare an arbitrarily large map in one block, or chunked across many sub-limit blocks and exhaust process memory until the OOM...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mapDecoder.Decode and mapDecoderUnmarshaler.Decode methods in codecmap.go, which use the attacker-controlled map block element count both to pre-size the destination map and as...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mapDecoder.Decode and mapDecoderUnmarshaler.Decode methods in codecmap.go, which use the attacker-controlled map block element count both to pre-size the destination map and as...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mapDecoder.Decode and mapDecoderUnmarshaler.Decode methods in codecmap.go, which use the attacker-controlled map block element count both to pre-size the destination map and as...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the mapDecoder.Decode and mapDecoderUnmarshaler.Decode methods in codecmap.go, which use the attacker-controlled map block element count both to pre-size the destination map and as...
CVE-2026-66445
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-66445 WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
EUVD-2026-49247
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-66445
The CVE refers to CVE-2026-66445, describing a Cross Site Scripting (XSS) vulnerability in the WordPress Open User Map plugin, versions
CVE-2026-66445
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-66445 WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting XSS in Open User Map = 1.4.46 versions...
CVE-2026-65920
A flaw was found in Diffusers. This path traversal vulnerability in the getcheckpointshardfiles function allows a remote attacker to read arbitrary files. By supplying malicious weightmap values in model index JSON, an attacker can use ../ sequences or absolute paths to escape the model directory...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...
WordPress Open User Map plugin <= 1.4.46 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by TurboNexic in WordPress Plugin Open User Map versions = 1.4.46...
Exploit for CVE-2026-42533
CVE-2026-42533 — nginx Heap Buffer Overflow PoC Exploit Pre...
CVE-2026-64277
A flaw was found in the Linux kernel's synaptics-rmi4 input driver. The rmif3amapgpios function incorrectly allocates memory for the gpiokeymap, making it smaller than required. This allows a device reporting a specific gpiocount value to trigger an out-of-bounds read, leading to information...
xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in XKB SetMap request via mapWidths indexing
A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. XkbSetMapChecks declares a fixed-size stack buffer mapWidths256 indexed by key type index. The helper function CheckKeyTypes writes to this buffer at a client-controlled offset, allowing a stack buffer overflow. This...
