PT-2026-123148

A vulnerability was identified in Sony Neural Network Libraries up to 1.39.0. This affects the function load param in txt of the file python/src/nnabla/utils/cli/encode decode param.py of the component Encode Param Command Handler. Such manipulation leads to code injection. It is possible to laun...

PT-2026-123127

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The explo...

PT-2026-123149

A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.0. This impacts the function func set nnabla version decorate of the file python/src/nnabla/utils/converter/utils.py of the component NNP Converter. Performing a manipulation of the argument function.type results in...

PT-2026-123153

A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress. Affected by this issue is the function dfrps ajax delete saved search of the file functions/ajax.php of the component AJAX Handlers. The manipulation results in missing authorization. The attack may be launch...

PT-2026-123204

A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of the component Dnsmasq. The manipulation of the argument rent time leads to crlf injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used...

PT-2026-123244

A vulnerability was identified in rathena FluxCP up to 98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d. This issue affects the function verifyiprange of the file lib/Flux/PaymentNotifyRequest.php of the component PayPal IPN Handler. The manipulation of the argument X-Real-IP leads to origin validation...

PT-2026-123376

In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op clk in probe to balance runtime PM The probe function puts the device into the runtime PM active state with only the "iis" bus clock enabled, but it also sets priv-op clk to the parent of the RCLK SR...

PT-2026-125479

Name of the Vulnerable Software and Affected Versions Furnace versions prior to 0.6.8.4 Description An out-of-bounds heap read occurs during the import of FamiTracker modules .ftm, .dnm, or 0CC/E-FamiTracker. The issue is triggered by an unbounded DPCM note count in the DivEngine::loadFTM functio...

PT-2026-125536

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has be...

PT-2026-125502

A vulnerability has been found in Argilla up to 2.8.0. The impacted element is an unknown function of the file argilla-frontend/components/features/annotation/container/fields/sandbox/Sandbox.vue. The manipulation of the argument template leads to cross site scripting. Remote exploitation of the...

PT-2026-123396

Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse multipart that allows unauthenticated attackers to corrupt memory by supplying an empty multipart boundary. Attackers can send a single crafted multipart/related request to the SBI interface of any network...

CVE-2026-115349

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parselinktext function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafted...

PT-2026-125477

Name of the Vulnerable Software and Affected Versions libfvde versions prior to 20260924 Description A heap out-of-bounds read occurs in the libfvde encrypted metadata read type 0x0024 function because the xml plist data size variable is not validated against the source metadata block. An attacke...

PT-2026-125476

Name of the Vulnerable Software and Affected Versions gbsplay versions 0.0.1 through 0.0.103 Description A heap out-of-bounds read occurs in the vgm open function within gbs.c because the VGM command stream is processed without proper bounds checks. An attacker can cause the player to crash by...

PT-2026-125532

YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile function that allows authenticated administrators to make arbitrary outbound requests by supplying crafted URLs in CSV file or image fields. Attackers can bypass the extension chec...

CVE-2026-115722

RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value type. Attackers can supply a crafted PLY file that makes plyreadlistproperty call an out-of-bounds handler, crashing ASCII parsing or...

ROS-20261026-73-0002

The vulnerability of the sshpktdisconnect function in the GSSAPI component of the OpenSSH cryptographic security tool is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

UBUNTU-CVE-2026-99018

In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIGSHADOWCALLSTACK, handleexception reloads the kernel shadow call stack pointer gp only when the trap came from userspace. It made that decision with...

PT-2026-125029

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInference opset1 to 6 processes malformed RNN and LSTM nodes from opsets 1 through 6 and GRU nodes from opsets 3 through 6 without verifying that the first input has rank three. T...

PT-2026-125480

Name of the Vulnerable Software and Affected Versions Furnace versions prior to 0.6.8.4 Description An out-of-bounds write exists in the DivEngine::loadFTM function. This occurs when the software processes a FamiTracker module containing a GROOVES block with an unchecked subsong index. An attacke...