690286 matches found
Linux sof_parse_token_sets Heap Buffer Overflow DoS
The vulnerability of the sofparsetokensets function in the sound/soc/sof/topology.c component of the Linux operating system is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow an attacker to cause a service failure...
AlmaLinux 9.2 [TuxCare] Security Update: libsoup / libsoup-devel / libsoup-doc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792599160)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792599160 advisory. - A flaw was found in libsoup. The soupuridecodedatauri function incorrectly treated base64 data-URI payloads as NUL-terminated...
CentOS Linux 7 [TuxCare] Security Update: ghostscript / ghostscript-cups / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792238279)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792238279 advisory. - In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript...
CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2026:1792143084)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792143084 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...
PT-2026-120164
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate indexed tensors of the file qwen-mtp-gguf/scripts/qwen mtp gguf pipeline.py. Executing a manipulation of the argument weight map can lead to path...
CVE-2025-60478
A use-after-free in the gffilterpacketdestroy function /filtercore/filterpck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
ROS-20261021-73-0070
The vulnerability of the rdpeiserverhandlemessages function in the channels/rdpei/server/rdpeimain.c file of the RDP client FreeRDP is related to insufficient input validation. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2026-120808
A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal. The...
PT-2026-120345
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load hf state dict filtered of the file models/tt transformers/tt/load checkpoints.py. This manipulation of the argument weight map causes path traversal. The attack may be initiated remotely...
PT-2026-120841
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...
CVE-2025-60469
A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60492
A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60497
A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120629
A heap use-after-free in the gf filter pid send event downstream function /filter core/filter pid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120630
A stack overflow in the gf bifs dec node function /bifs/field decode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120632
A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120637
A NULL pointer dereference in the gf ac4 presentation ch mode function /media tools/av parsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
RHEL 9 : rsyslog (RHSA-2026:86124)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:86124 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists,...