Lucene search
+L

11479 matches found

Patchstack
Patchstack
added 2026/08/06 9:13 p.m.13 views

NPM: ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633

NPM: ngx-extended-pdf-viewer bundles a version of pdf.js vulnerable to CVE-2026-16633 vulnerability discovered by ? in WordPress Npm ngx-extended-pdf-viewer versions = 27.0.0-rc.0, 29.0.0-rc.3...

5.5AI score
SaveExploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2026/08/06 9:12 p.m.6 views

@0xwork/connect (0.1.8), @3onedata/alsatian (>=0.1.8-fix.3, <=0.1.8-fix.5) +1446 more potentially affected by CVE-2026-16633 via pdfjs-dist (>=5.6.205, <=6.1.200)

pdfjs-dist NPM version =5.6.205, =0.1.8-fix.3, =1.0.0, =0.2.0, =0.0.0, =0.0.11-alpha-20260329202526-cfad3bcbd829b82471d2d4fed4e49b2ef849cafb, =4.11.1, =0.0.4, =0.104.0, =0.1.0, =0.2.340, =0.1.0, =0.17.9, =0.22.4 and more Source cves: CVE-2026-16633 Source advisory: SNYK:JS-PDFJSDIST-18592344...

5.3AI score
SaveExploits0
Cvelist
Cvelist
added 2026/08/06 8:37 p.m.31 views

CVE-2026-71488 league/commonmark: Quadratic-time denial of service when parsing crafted Markdown

league/commonmark is a PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cause the parser to have quadratic time complexity when converting, because several parsing paths repeatedly rescan growing portions of a line to translat...

7.5CVSS0.00346EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
added 2026/08/06 8:27 p.m.7 views

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21416 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)

js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...

5.5AI score
SaveExploits0
vulnersOsv
vulnersOsv
added 2026/08/06 8:10 p.m.4 views

@nx/powerpack-azure-cache (>=5.0.0, <=5.0.7) potentially affected by CVE-2026-71476 via @nx/azure-cache (>=5.0.0, <=5.0.7)

@nx/azure-cache NPM version =5.0.0, =5.0.0, =5.0.7 Source cves: CVE-2026-71476 Source advisory: OSV:GHSA-VP3H-GHGH-JR7G...

8.7CVSS5.3AI score0.00582EPSS
SaveExploits0
EUVD
EUVD
added 2026/08/06 7:49 p.m.17 views

EUVD-2026-54241

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Mermaid XY Charts are vulnerable to an infinite loop denial of service in the setXAxisRangeData function when configuring an X-Axis with invalid...

5.3CVSS5.5AI score0.00408EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/06 4:16 p.m.13 views

CVE-2026-66843

Inclusion of Functionality from Untrusted Control Sphere vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to load a document of their choosing into a trusted page via the data attribute of an element in sanitized HTML. object is the one URI-bearing element in...

6.1CVSS0.0029EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/06 3:52 p.m.96 views

CVE-2026-43631

The CVE affects llama.cpp builds from b7492 to b9060, where a use-after-free in the vocab pointer of llama-server occurs when --sleep-idle-seconds is enabled. Unauthenticated remote attackers can trigger this by sending requests to affected endpoints as the server transitions to sleep mode, causi...

9.2CVSS6.4AI score0.00421EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/06 3:40 p.m.50 views

CVE-2026-43627

The CVE-2026-43627 issue affects llama.cpp (b1283–b9058) in the llama_batch_init() function, where unchecked multiplications in malloc() cause allocation sizes to wrap past INT32_MAX. This leads to heap corruption and can potentially enable arbitrary code execution through subsequent batch operat...

8.5CVSS6.5AI score0.0014EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/06 3:27 p.m.12 views

CVE-2026-43622 llama.cpp b1886–b7445 Double Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

8.5CVSS6.3AI score0.00134EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/06 3:16 p.m.12 views

CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

7.5CVSS0.00508EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/06 3:16 p.m.7 views

UBUNTU-CVE-2026-34502

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

7.5CVSS5.2AI score0.00508EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/06 3:16 p.m.8 views

UBUNTU-CVE-2026-34191

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...

9.1CVSS5.6AI score0.00349EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/06 3:09 p.m.36 views

CVE-2026-3430 Creative Mail 1.6.5 - 1.6.9 - Unauthenticated SQLi

The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement, leading to an unauthenticated SQL injection when the abandoned cart email is managed by creative mail...

8.6CVSS0.00241EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/06 2:49 p.m.17 views

EUVD-2026-54082

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the HTML5 scrubber in rrrene htmlsanitizeex allows a remote attacker to force visitors of a page to navigate to a site of the attacker's choosing via a element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied...

2.3CVSS5.2AI score0.005EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/06 2:31 p.m.33 views

CVE-2026-34502 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

0.00508EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/06 2:31 p.m.10 views

EUVD-2026-53916

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3...

7.5CVSS5.4AI score0.00508EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/08/06 1:05 a.m.11 views

SUSE CVE-2026-67182

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...

4.8CVSS5.6AI score0.00415EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2026/08/06 1:05 a.m.14 views

SUSE CVE-2026-67313

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the JavaScript call stack and trigger...

6.3CVSS5.5AI score0.00339EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/06 12:00 a.m.9 views

RLSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: Rocky Linux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:Rocky...

5.8CVSS5.5AI score0.00153EPSS
SaveExploits0References2
Rows per page
Query Builder