19113 matches found
GHSA-P893-RVQ9-2XF9 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Summary Heap-buffer-overflow READ 16 bytes in Gemm76::adaptgemm76 onnx/versionconverter/adapters/gemm76.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses Bshape1 without checking rank. On Release builds the OOB read ...
Out-of-bounds Read
Overview onnx is an Open Neural Network Exchange Affected versions of this package are vulnerable to Out-of-bounds Read in the adaptgemm76 function when processing input tensors with fewer than two dimensions. An attacker can cause a crash or potentially leak adjacent heap memory by providing a...
EUVD-2026-41112
ImageMagick: Policy Bypass in concatenate operation due to missing checks...
NPM: electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
NPM: electron-updater: Cross-origin redirect leaks PRIVATE-TOKEN and mixed-case Authorization credentials in builder-util-runtime vulnerability discovered by ? in WordPress Npm builder-util-runtime versions 9.7.0...
EUVD-2026-40455
electron-updater: Cross-origin redirect leaks PRIVATE-TOKEN and mixed-case Authorization credentials in builder-util-runtime...
MINI-7V74-F5RG-VQFR
Bulletin has no description...
WordPress Product Feed Manager plugin <= 7.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by hhhai in WordPress Plugin Product Feed Manager versions = 7.6.1...
WordPress Contact Form 7 – Dynamic Text Extension plugin <= 5.0.6 - Content Injection vulnerability
Content Injection vulnerability discovered by NosleeP++ in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.6...
PT-2026-64384
Summary Heap-buffer-overflow READ 16 bytes in Gemm 7 6::adapt gemm 7 6 onnx/version converter/adapters/gemm 7 6.h:41 when ConvertVersion processes a model with a Gemm node whose input tensors have fewer than 2 dimensions. The adapter accesses B shape1 without checking rank. On Release builds the...
ROS-20260724-73-0046
The vulnerability in ImageMagick 7 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260724-73-0001
The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260724-73-0002
The vulnerability in ImageMagick 7 is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260724-73-0044
The vulnerability in ImageMagick7 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260724-73-0043
The vulnerability in ImageMagick 7 is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
Security update for aws-nitro-enclaves-cli (important)
openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21406-1 Rating: important References: bsc1270492 bsc1270542 bsc1270705 bsc1270747 bsc1270839 bsc1270932 bsc1270952 Cross-References:...
The vulnerability of the MixCoder_Code() function in the XZ Decoder component of the 7-Zip archive processor allows a hacker to execute arbitrary code.
The vulnerability of the MixCoderCode function in the XZ Decoder component of the 7-Zip archive processor is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CVE-2026-34496
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...
CVE-2024-58355
Cal.com (calcom/cal.diy) versions up to 4.7.15 are affected by a stored XSS in the booking flow. The vulnerability occurs in the single booking view where booking-question labels are rendered via React’s dangerouslySetInnerHTML without sanitization, allowing an attacker who can create an event ty...
CVE-2024-58355 Cal.com through 4.7.15 Cross-Site Scripting via booking questions
Cal.com calcom/cal.diy versions through 4.7.15 contain a stored cross-site scripting vulnerability. The single booking view e.g., https://app.cal.com/booking/ renders booking-question field labels via React's dangerouslySetInnerHTML without sanitizing or escaping user input. An attacker who can...