GHSA-98QH-XJC8-98PQ vulnerabilities

Vulnerabilities for packages: flyway-fips, flyway, dependency-track, nacos, debezium, sonarqube, dependency-track-apiserver, apicurio-registry, apache-hop-fips, camunda, kayenta-fips, geoserver, druid, camunda-zeebe, thingsboard, ghidra, kayenta, keycloak-fips, apache-hop, nacos-docker, keycloak,...

CVE-2026-42198 vulnerabilities

Vulnerabilities for packages: flyway-fips, flyway, dependency-track, nacos, debezium, sonarqube, dependency-track-apiserver, apicurio-registry, apache-hop-fips, camunda, kayenta-fips, geoserver, druid, camunda-zeebe, thingsboard, ghidra, kayenta, keycloak-fips, apache-hop, nacos-docker, keycloak,...

CVE-2026-42198 vulnerabilities

Vulnerabilities for packages: druid, debezium, thingsboard, apicurio-registry, keycloak, sonarqube, flyway, dependency-track...

GHSA-98QH-XJC8-98PQ vulnerabilities

Vulnerabilities for packages: druid, debezium, thingsboard, apicurio-registry, keycloak, sonarqube, flyway, dependency-track...

CVE-2026-7739

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxerprev/tsMuxer/hevc.cpp. This manipulation of the argument trackid causes denial of service. The attack requires local access. The exploit has...

CVE-2026-7740 justdan96 tsMuxer vvc.cpp setFPS denial of service

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument trackid leads to denial of service. An attack has to be approached locally. The exploit has been disclosed...

CVE-2026-7740

The CVE concerns justdan96 tsMuxer up to 2.7.0. The vulnerability is in VvcVpsUnit::setFPS (tsMuxer/vvc.cpp) where manipulation of the track_id argument can cause a denial of service. Local attack vector; exploit has been publicly disclosed. Affected products are noted as no longer maintained by ...

CVE-2026-7740 justdan96 tsMuxer vvc.cpp setFPS denial of service

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument trackid leads to denial of service. An attack has to be approached locally. The exploit has been disclosed...

EUVD-2026-26923

A security vulnerability has been detected in justdan96 tsMuxer up to 2.7.0. This issue affects the function VvcVpsUnit::setFPS of the file tsMuxer/vvc.cpp. Such manipulation of the argument trackid leads to denial of service. An attack has to be approached locally. The exploit has been disclosed...

CVE-2026-7739 justdan96 tsMuxer hevc.cpp setFPS denial of service

A weakness has been identified in justdan96 tsMuxer up to 2.7.0. This vulnerability affects the function HevcVpsUnit::setFPS of the file /AFLplusplus/tsMuxerprev/tsMuxer/hevc.cpp. This manipulation of the argument trackid causes denial of service. The attack requires local access. The exploit has...

tsMuxer 安全漏洞

tsMuxer is a transport stream multiplexer developed by Dan’s individual developer, used for re-mixing/reusing basic streams. Versions of tsMuxer 2.7.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the setFPS function in the tsMuxer/vvc.cpp file, which allows for...

tsMuxer 安全漏洞

tsMuxer is a transport stream multiplexer developed by Dan’s individual developer, used for re-mixing/reusing basic streams. Versions of tsMuxer 2.7.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the function HevcVpsUnit::setFPS in the...

CVE-2026-40542 vulnerabilities

Vulnerabilities for packages: apache-nifi, trino, dependency-track, opensearch...

GHSA-V468-QCJX-R72W vulnerabilities

Vulnerabilities for packages: apache-nifi, trino, dependency-track, opensearch...

CVE-2026-40542 vulnerabilities

Vulnerabilities for packages: jbang, trino, dependency-track-apiserver, pinot, pinot-fips, opensearch, dependency-track, opensearch-fips, apache-nifi...

GHSA-V468-QCJX-R72W vulnerabilities

Vulnerabilities for packages: jbang, trino, dependency-track-apiserver, pinot, pinot-fips, opensearch, dependency-track, opensearch-fips, apache-nifi...

Cross-site Scripting (XSS)

Overview beets is a media library management system for obsessive music geeks. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the included index.html template. An attacker can execute scripts in a victim’s browser by supplying crafted music metadata fields su...

CVE-2026-35901

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connectio...

CVE-2026-35901

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connectio...

EUVD-2026-25902

A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedly sending SETUP requests for the same media track within a single RTSP session. This causes the server to reset the RTSP connectio...