CVE-2026-119591: SQLite: SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to…

SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization that allows attackers to crash the host process via count over a large multi-row VALUES clause. Attackers supplying SQL or a database file with a crafted view can trigger deeply nested TKPLUS expressions who...

PT-2026-133455

SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the SQLITE LIMIT EXPR DEPTH nesting limit because common table expressions are not counted against it. Attackers can supply a WITH clause chaining tens of thousands of CTEs, via plain SQL or a view in a...

PT-2026-133620

Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing...

PT-2026-133553

AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af get page that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the...

CVE-2026-119601: sshock AFFLIB: AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to…

AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in afgetpage that allows attackers to corrupt heap memory by supplying crafted AFF images with mismatched page and sector sizes. Attackers can set a page size larger than and not a multiple of the sector size, causing the...

CVE-2026-104065: Scribus: Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an…

Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing...

CVE-2026-104061: Scribus: Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader_psd loader that uses…

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-117184

Traggo server v0.8.3 (commit 6321119c3c2d55f04e2e4967f6492aabd6067b76) is vulnerable to an unauthenticated Denial of Service (DoS) via GraphQL alias overloading. The GraphQL endpoint (/graphql) fails to enforce complexity limits or request body size limits , and the version field lacks an authent...

CVE-2026-61627: libass: libass is a portable subtitle renderer for the `ASS`/SSA (Advanced Substation Alpha/Substation Alpha) subtitle format

libass is a portable subtitle renderer for the ASS/SSA Advanced Substation Alpha/Substation Alpha subtitle format. Prior to 0.17.5, libass can overread and overwrite the glyph array in wraplinesmeasure while rendering malicious ASS content. In wrap modes other than two, a final line ending with a...

CVE-2026-119365: bPlugins Media Player Addons for Elementor – Media Player widget for WP: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media…

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player Addons for Elementor – Media Player widge...

CVE-2026-117184

An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service DoS via a crafted POST request to the GraphQL endpoint...

PT-2026-133616

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloader psd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-119299: gopacket: gopacket provides packet processing capabilities for Go

gopacket provides packet processing capabilities for Go. Prior to 1.7.2, the SCTP chunk chain in layers/sctp.go passes attacker-controlled declared lengths and counts to decodeSCTPInit, decodeSCTPShutdown, decodeSCTPError, decodeSCTPSack, and decodeSCTPParameter without checking that each chunk...

EUVD-2026-114087

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...

CVE-2026-117346

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...

CVE-2026-117346: n/a: Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...

CVE-2026-117346

Bitcoin Core versions through 31.1 are vulnerable to a Denial of Service (DoS) attack. The root cause is that undo files do not have a size limit, which can be exploited to disrupt the service. No specific remediation versions or exploit details are provided in the documents.

PT-2026-133601

Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...

CVE-2026-119728: Red Hat: A flaw was found in the H.264 video parser in gst-plugins-bad

A flaw was found in the H.264 video parser in gst-plugins-bad. When processing a specially crafted H.264 video file with malformed Multiview MVC Sequence Parameter Set data, the parser can dereference a NULL pointer during the cleanup of partially allocated internal structures after a parse...

CVE-2026-118938: trailofbits fickling: In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example…

In Trail of Bits fickling through 0.1.12, a pickle STACKGLOBAL operand carrying a dotted qualname for example "Values.readfile" is resolved by pickle's findclass through getattribute to an arbitrary attribute path rather than to a module-level function. Fickling records only the leading component...