174144 matches found
kernel: hwrng: virtio: clamp device-reported used.len at copy_data()
A flaw was found in the Linux kernel's virtio-rng driver. A malicious or buggy virtualized hardware random number generator virtio-rng backend can report an overly large data length to the guest operating system. This unchecked length can lead to an out-of-bounds read, causing the driver to acces...
CVE-2026-87963 Yo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username Parameter
The Yo WordPress plugin from 1.1 through 1.3.1 does not sanitize or parameterize the username request parameter before using it in a SQL query, and reads it before WordPress applies its request escaping, allowing unauthenticated attackers to perform SQL injection and read arbitrary database...
CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding
@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...
CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding
@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...
EUVD-2026-81383
@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...
CVE-2026-90982 @fastify/static vulnerable to route guard bypass via path case-folding
@fastify/static is a Fastify plugin that serves static files from a configured root directory. In versions before 10.1.4, on a case-insensitive filesystem such as Windows or the default macOS volume, a route guard or allowedPath restriction can be bypassed by altering the letter case of a path...
CVE-2026-25294
CVE-2026-25294 is a buffer over-read in Qualcomm WLAN Firmware that causes a transient denial of service while parsing a frame during channel usage. The adjacent-network attack vector (CVSS 3.1: 7.4 HIGH , AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) indicates an attacker on an adjacent network can trigg...
CVE-2026-25294 Buffer Over-read in WLAN Firmware
Transient DOS while parsing frame during channel usage...
CVE-2026-25294 Buffer Over-read in WLAN Firmware
Transient DOS while parsing frame during channel usage...
CVE-2026-25284 Buffer Over-read in OOBM
Information Disclosure when a pointer is reused after being deallocated...
CVE-2026-25284
CVE-2026-25284 is a buffer over-read in Qualcomm's OOBM component, caused by a pointer being reused after being deallocated . This leads to Information Disclosure with a CVSS 3.1 score of 7.3 (HIGH) , exploitable via a local vector with low privileges and changed scope . No in-the-wild exploitati...
CVE-2026-25284 Buffer Over-read in OOBM
Information Disclosure when a pointer is reused after being deallocated...
CVE-2026-25282 Out-of-bounds Read in OOBM
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
CVE-2026-25282 Out-of-bounds Read in OOBM
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
CVE-2026-25282
CVE-2026-25282 is an out-of-bounds read in the OOBM component of a Qualcomm product. The vulnerability is triggered when unverified data from a neighboring system is processed, causing an out-of-bound memory access that results in a transient denial of service . The CNA-assigned CVSS 3.1 score is...
CVE-2026-25275
CVE-2026-25275 is a buffer over-read in Qualcomm WLAN Firmware that results in a transient denial of service when the firmware processes authentication frames containing invalid FILS (Fast Initial Link Setup) information element header lengths . The vulnerability is network-exploitable with no pr...
CVE-2026-25275 Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths...
CVE-2026-25275 Buffer Over-read in WLAN Firmware
Transient DOS when processing authentication frames with invalid FILS information element header lengths...