XSS in ammonia via SVG `animate` and `set` animation tags

The following SVG will produce a link with a javascript scheme. If the user clicks this link, they will run it. xml Click set Ammonia did not apply attribute filters based on attributeName, so the contents of the to, from, and values tags were not sanitized as URLs. Applications that do not...

CVE-2026-64111

A flaw was found in the Linux kernel's Security Module LSM. A local attacker could exploit this vulnerability by leveraging an improper handling of a credential guard mutex in the lsmsetselfattr function. This oversight may allow the attacker to bypass security restrictions enforced by modules su...

EUVD-2024-55692

The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...

PT-2026-62418

Name of the Vulnerable Software and Affected Versions Autel Maxi Charger Single versions prior to V1.03.52 Description A heap-based buffer overflow occurs in the set ap param command processed by the '/localcfg' endpoint. An authenticated attacker can provide oversized input to trigger this issue...

PT-2026-62054

Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writes via an unvalidated parent index in dsu find. The attach-time validator dsu validate header checks the header scalars and region layout against the file size, but does not validate the array contents it th...

EulerOS Virtualization 2.10.1 : libcap (EulerOS-SA-2026-2825)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the...

CVE-2026-8933: Execution with Unnecessary Privileges

A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilitie...

PT-2026-62043

Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unvalidated node indices in the rank and min/max query paths. The attach-time validator ss validate header bounds only the root index against the node pool node capacity. The order-statistics and min/max queries...

PT-2026-61956

Name of the Vulnerable Software and Affected Versions snap-confine affected versions not specified Description A local privilege escalation issue exists in snap-confine, a core component used by Canonical snapd to create secure execution environments for snap applications. The flaw occurs in...

CVE-2026-56581: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

HCL MyCloud was affected with Cookie Attribute Path Not Set. It may increase the risk of unauthorized access to session data or authentication tokens...

EulerOS Virtualization 2.12.0 : libcap (EulerOS-SA-2026-2780)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the...

EulerOS Virtualization 2.10.0 : libcap (EulerOS-SA-2026-2856)

According to the versions of the libcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use TOCTOU race condition in the...

The vulnerability of the `nvme_dbbuf_set()` function in the driver/nvme/host/pci.c module of the Linux NVME driver allows a attacker to escalate their privileges or execute arbitrary code.

The vulnerability of the nvmedbbufset function in the drivers/nvme/host/pci.c file of the NVME kernel driver in Linux is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

Improperly Controlled Sequential Memory Allocation

Overview Affected versions of this package are vulnerable to Improperly Controlled Sequential Memory Allocation via the CookieJar process. An attacker can exhaust system memory and cause service disruption by sending a large number of oversized Set-Cookie headers in responses, which are then stor...

Guzzle: Unbounded response cookies risk denial of service

Impact In affected versions, Guzzle's built-in CookieJar accepts any number of Set-Cookie header fields from one response, with no limit on the size of each field. When a later request matches the stored cookies, Guzzle places every match into one generated Cookie header without limiting the numb...

Allocation of Resources Without Limits or Throttling

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the HTTP/2 stream handling of lib/adapters/http.js, which does not enforce maxBodyLength on streamed uploads becau...

CVE-2024-51312

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub42EEE0 function of the file /goform/SetStaticRouteCfg...

USN-8573-1: libde265 vulnerabilities

It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...

USN-8573-1 libde265 vulnerabilities

It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...

CVE-2026-63771

Adminer before 5.4.3 contains a cookie injection vulnerability that allows attackers to manipulate cookie attributes by injecting arbitrary values through the unsanitized X-Forwarded-Prefix HTTP header used in Set-Cookie path attributes. Attackers can exploit a misconfigured reverse proxy to...