CVE-2026-97539

A flaw was found in the Linux kernel's xusbatm USB driver. When dynamic device identifiers are configured, the driver improperly performs pointer arithmetic on heap-allocated identifiers, resulting in an out-of-bounds array access. A local user could exploit this flaw to cause a Denial of Service...

CVE-2026-97518

A flaw was found in the Linux kernel's cfg80211 wireless configuration subsystem. The subsystem fails to reject duplicate cipher suite entries during wireless device registration. This flaw allows a local user to cause an array buffer overflow within the Wireless Extensions WEXT compatibility...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

CVE-2026-85644

The XS::Parse::Infix module (versions 0.40 through 0.49 ) for Perl contains a vulnerability where the wrapper function for list-associative infix operators improperly validates arguments. Specifically, it uses SvRV() instead of SvROK() to check for array references. This allows the interpreter to...

CVE-2026-93265

A flaw was found in the Linux kernel's TC9563 power control driver. When parsing device tree nodes for the integrated Ethernet endpoint during device initialization, the driver improperly processes multiple functions, causing an out-of-bounds array access. A local attacker capable of supplying or...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-42976 | Remote Access Management service/API RPC server Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege...

CVE-2026-82333

A flaw was found in Multer, a Node.js middleware for handling multipart/form-data. A remote attacker can send a specially crafted multipart request containing oversized array indices in field names. This can cause Multer's field parser to synchronously iterate a maximum-length sparse array, which...

drupalgeddon2-cve-lab

Drupalgeddon2 CVE-2018-7600 ラボ このリポジトリは、Drupalgeddon2 実行用の再利用可能なターゲットパッケージです。 Sentinel は 2026-08-27 に、SQLite と PHP 7.4 を搭載した Drupal core 7.57 に対して CVE-2018-7600 を再現しました。このエクスプロイトは、Drupal 7 の 2 リクエスト AJAX レンダー配列パスです: 1. namepostrender=passthru、namemarkup=id、nametype=markup...

Improper Validation of Array Index

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Array Index via unvalidated stoptokenids on the OpenAI-compatible POST /v1/completions and POST /v1/chat/completions endpoint...

Improper Validation of Array Index

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Improper Validation of Array Index via missing vocabulary-bound validation of stoptokenids in the Rust HTTP and gRPC frontends. When a request is...

Information Exposure

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Information Exposure in the array filter, which is registered without the necessary sandboxing guard. An attacker can access sensitive...

CVE-2026-100668

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100668 Grav before 2.0.25 Sandbox Escape via array Filter

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

EUVD-2026-87762

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

CVE-2026-100668

Grav versions 2.0.0 through 2.0.24 are vulnerable to a Twig content sandbox escape due to the array filter being registered without the necessary needs_is_sandboxed guard. This allows an attacker capable of authoring Twig content to evaluate grav|array to access the raw Pimple-based dependency in...

CVE-2026-100668 Grav before 2.0.25 Sandbox Escape via array Filter

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

CVE-2026-100668 Grav before 2.0.25 Sandbox Escape via array Filter

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The array filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray — ...

CVE-2026-100668

Grav 2.0.0 through 2.0.24 contain a Twig content sandbox escape. The "array" filter and its identical function form is on the sandbox allowlist but is registered without the needsissandboxed guard that printr, vardump, jsonencode, yamlencode and string carry, and its implementation calls toArray ...

PT-2026-99339

Name of the Vulnerable Software and Affected Versions Grav versions 2.0.0 through 2.0.24 Description A Twig content sandbox escape exists where the array filter is included in the sandbox allowlist without the necessary needs is sandboxed guard. This allows the filter to call toArray or perform a...