22835 matches found
CVE-2026-66733
Sonic 3 A.I.R. is affected by an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() prior to commit 2492d18. The mUniquePacketID field is read directly from the UDP wire-format header without bounds checking, causing the server to allocate one CacheItem per missing ...
CVE-2026-66733 Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache
Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket that allows unauthenticated remote attackers to crash the server process by sending a crafted UDP packet with mUniquePacketID set to the maximum uint32 value. The...
CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
CVE-2026-66732
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager: established connections are resolved by a two-byte local connection handle without verifying the datagram source against the registered remote address. An on-path attacker observi...
WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Featured Video Plus versions = 2.3.3...
RHSA-2026:50816 Red Hat Security Advisory: python3 security update
Bulletin has no description...
RHSA-2026:50771 Red Hat Security Advisory: python3.12 security update
Bulletin has no description...
EUVD-2026-53853
An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue...
CVE-2026-54225
Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update t...
ROOT-OS-ALPINE-321-CVE-2025-70873 CVE-2025-70873 in sqlite - Patched by Root
Root has patched CVE-2025-70873 in the sqlite package for Root:Alpine:3.21. Multiple fixed versions available...
CVE-2026-18510
CVE-2026-18510 affects TranslatePress – Translate Multilingual (WordPress) up to version 3.2.6. Root cause: insufficient input sanitization and output escaping, enabling unauthenticated stored XSS via Comment Content. Attackers can inject arbitrary scripts in pages viewed by users; payloads use W...
Fedora 43 : trafficserver (2026-144d6c9bcc)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-144d6c9bcc advisory. Update to upstream 10.1.4 Resolves: - CVE-2026-22068 - Unanchored regular-expression matching allows ACL and policy bypass - CVE-2026-33267 -...
CVE-2026-71319
creationtimestamp| type| source ---|---|--- 2026-08-05 22:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msekiznbnx2z 2026-08-05 22:26:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3fsizpdnyrbkp 2026-08-05 23:01:06+00:00| seen|...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...
CVE-2026-63263 vulnerabilities
Vulnerabilities for packages: ruby3.4-elasticsearch, ruby3.2-elasticsearch, ruby4.0-elasticsearch, ruby3.3-elasticsearch...
GHSA-5V5G-HVW6-X2X7 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch...
CVE-2026-63263 vulnerabilities
Vulnerabilities for packages: ruby3.2-elasticsearch, ruby3.3-elasticsearch, ruby4.0-elasticsearch, ruby3.4-elasticsearch...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset...