689593 matches found
PT-2026-120308
Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...
PT-2026-120329
Summary sanitize-html discards the content of every element in nonTextTags. It delimits that region using htmlparser2's close events, and ignores the isImplied flag htmlparser2 passes it. Closing a still-open ancestor from inside a makes htmlparser2 unwind its stack past the noscript; the synthet...
PT-2026-118407
A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key . It...
PT-2026-119045
A buffer overflow in the gf ac4 parser bs function /media tools/av parsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
PT-2026-120136
IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote...
ROS-20261020-73-0104
The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
PT-2026-120148
A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task store/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of...
PT-2026-117950
DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get user from headers function that grants every caller the admin role. Unauthenticated attackers can send prompts that make the ReAct agent's...
PT-2026-119046
A segmentation violation in the gf props equal internal function /filter core/filter props.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...
PT-2026-117954
Name of the Vulnerable Software and Affected Versions Letta versions prior to 0.16.9 Description The default self-hosted setup includes a compose.yaml file that fails to enable LETTA SERVER SECURE, resulting in the omission of password middleware and leaving all API routes unauthenticated. This...
PT-2026-118501
Name of the Vulnerable Software and Affected Versions ApostropheCMS Form versions prior to 1.5.5 Description The form submission endpoint '/api/v1/@apostrophecms/form/submit' processes unbounded multipart uploads using the multer function before performing authentication, API-key verification, or...
CVE-2025-60475
A buffer overflow in the gfac4parserbs function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted input...
PT-2026-118496
Name of the Vulnerable Software and Affected Versions uploadfs versions prior to 1.28.0 Description The local storage backend of the uploadfs library fails to properly validate or sanitize user-supplied paths. The prefixPath function only removes double slashes and does not normalize paths or...
ROS-20261020-73-0071
The vulnerability in Wireshark is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58079)
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...
Siemens SIMATIC S7-1500 TM MFP Incorrect Synchronization (CVE-2026-23281)
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...
Linux net/core/flow_dissector skb_flow_dissect Buffer Overflow
The vulnerability of the skbflowdissect function in the net/core/flowdissector.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Siemens SIMATIC S7-1500 TM MFP Multiple Locks of a Critical Resource (CVE-2026-23292)
In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, is targetcoreitemdbrootstore. This function called filpopen, following...
ROS-20261020-73-0030
The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-98647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...