24351 matches found
CVE-2026-45100 OpenSIPS: Buffer Overflow in Base64 Encode Transformation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64encode string transformation. The size check for s.b64encode only verifies that the input fits within the 64 KB transformation buffer, but...
CVE-2026-65986
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type...
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...
CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
EUVD-2026-52819
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required...
CLSA-2026-1785727932 TuxCare security update for org.apache.logging.log4j (3 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 3 CVEs. Fixed in 2.17.2-tuxcare.2...
CLSA-2026-1785381052 TuxCare security update for angular (4 CVEs)
TuxCare rebuilt angular to address 4 CVEs. Fixed in 1.5.10-tuxcare.3...
CLSA-2026-1784856365 TuxCare security update for 12 packages (1 CVE)
TuxCare rebuilt 12 packages to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
CLSA-2026-1784856221 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 3.3.3-tuxcare.2...
CLSA-2026-1784769527 TuxCare security update for 148 packages (1 CVE)
TuxCare rebuilt 148 packages to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1784683091 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 4.3.7-tuxcare.2...
CLSA-2026-1784769543 TuxCare security update for marked (3 CVEs)
TuxCare rebuilt marked to address 3 CVEs. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1784682764 TuxCare security update for npm-user-validate (1 CVE)
TuxCare rebuilt npm-user-validate to address 1 CVE. Fixed in 0.1.5-tuxcare.1...
CLSA-2026-1783904634 TuxCare security update for org.springframework.boot (6 CVEs)
TuxCare rebuilt 75 org.springframework.boot packages to address 6 CVEs. Fixed in 2.5.15-tuxcare.1...
CLSA-2026-1784077482 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.1...
CLSA-2026-1782781162 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.7-tuxcare.3...
CLSA-2026-1782867594 TuxCare security update for zendframework/zendframework (1 CVE)
TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p1+tuxcare...
CLSA-2026-1781657698 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 3 CVEs. Fixed in 5.3.31-tuxcare.4...