171175 matches found
PT-2026-99300
Name of the Vulnerable Software and Affected Versions Capgo capgo.app backend versions prior to 12.127.5 Description An authorization flaw exists in the 'PATCH /private/role bindings/:binding id' endpoint. The handler verifies that the priority rank of a newly assigned role does not exceed the...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-100387 pgPointcloud through 1.2.5 heap out-of-bounds read via WKB deserialization
pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in dimensional patch WKB deserialization that allows authenticated database users to read adjacent heap memory. Attackers can supply crafted pcpatch values with attacker-controlled size fields to copy heap memory into...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
UBUNTU-CVE-2026-51772
A Server-Side Request Forgery SSRF vulnerability exists in the Image API v2 of OpenStack Glance. When the showmultiplelocations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an image in the queued state by sending a crafted...
ROOT-APP-NPM-CVE-2024-21534 CVE-2024-21534 in jsonpath-plus - Patched by Root
Root has patched CVE-2024-21534 in the jsonpath-plus package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-25210 CVE-2026-25210 in expat - Patched by Root
Root has patched CVE-2026-25210 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-45186 CVE-2026-45186 in expat - Patched by Root
Root has patched CVE-2026-45186 in the expat package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-66046 CVE-2026-66046 in expat - Patched by Root
Root has patched CVE-2026-66046 in the expat package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root
Root has patched CVE-2023-51594 in the bluez package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-51594 CVE-2023-51594 in bluez - Patched by Root
Root has patched CVE-2023-51594 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2016-9917 CVE-2016-9917 in bluez - Patched by Root
Root has patched CVE-2016-9917 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2016-9798 CVE-2016-9798 in bluez - Patched by Root
Root has patched CVE-2016-9798 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2023-51589 CVE-2023-51589 in bluez - Patched by Root
Root has patched CVE-2023-51589 in the bluez package for Root:Debian:12. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27903 CVE-2026-27903 in minimatch - Patched by Root
Root has patched CVE-2026-27903 in the minimatch package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-27904 CVE-2026-27904 in minimatch - Patched by Root
Root has patched CVE-2026-27904 in the minimatch package for Root:npm. Multiple fixed versions available...