Lucene search
+L

9237 matches found

OSV
OSV
added 2026/06/22 11:54 p.m.10 views

CVE-2026-10651 Bluetooth Classic SDP parser truncation bug in bt_sdp_parse_attribute() leads to reachable assertion and possible out-of-bounds read

A malformed Bluetooth Classic SDP attribute can trigger a reachable assertion in Zephyr's SDP parser. In subsys/bluetooth/host/classic/sdp.c, btsdpparseattribute accepts an input buffer once it contains the 1-byte attribute type and 2-byte attribute id, but then unconditionally pulls an additiona...

7.1CVSS6.1AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/22 11:54 p.m.9 views

CVE-2026-10651

btsdpparseattribute in subsys/bluetooth/host/classic/sdp.c validated only that the SDP record buffer held the type-marker byte plus the 2-byte attribute ID a check of buf-len data0 before its only bounds guard an ASSERTNOMSG that compiles out when CONFIGASSERT is disabled, the production default,...

7.1CVSS6.1AI score0.0028EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2026/06/22 7:17 p.m.16 views

CVE-2026-54298

Astro is a web framework. Prior to 6.4.6, the spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute, which interpolates the key into the HTML output without escaping. When a developer uses the spread syntax ...props ...

6.1CVSS0.00228EPSS
SaveExploits1References1
CVE
CVE
added 2026/06/22 5:33 p.m.29 views

CVE-2026-54298

Astro, prior to 6.4.6, is vulnerable to XSS via unescaped attribute names when spreading props onto HTML elements. The spreadAttributes path iterates over object keys and passes them to addAttribute, which interpolates the key into the HTML output without escaping, allowing attackers to inject ev...

6.1CVSS6AI score0.00228EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2026/06/22 5:33 p.m.7 views

CVE-2026-54298 Astro: XSS via Unescaped Attribute Names in Spread Props

Astro is a web framework. Prior to 6.4.6, the spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute, which interpolates the key into the HTML output without escaping. When a developer uses the spread syntax ...props ...

4.2CVSS6.1AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/22 5:33 p.m.8 views

CVE-2026-54298

Astro is a web framework. Prior to 6.4.6, the spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute, which interpolates the key into the HTML output without escaping. When a developer uses the spread syntax ...props ...

6.1CVSS6AI score0.00228EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/06/22 4:16 p.m.16 views

DEBIAN-CVE-2026-50557

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute...

6.1CVSS5.8AI score0.00203EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/06/22 3:13 p.m.8 views

libexpat: denial of service via crafted XML input

A flaw was found in libexpat. When processing a specially crafted XML input containing a specific pattern of attributes, the parsing time increases quadratically due to checks for attribute name collisions. This consumes excessive CPU resources and eventually results in a denial of service...

7.5CVSS5.8AI score0.00443EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/06/22 3:11 p.m.13 views

EUVD-2026-38257

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute...

5.3CVSS5.8AI score0.00203EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/06/22 3:11 p.m.48 views

CVE-2026-50557 Angular: Template and Attribute Namespace Sanitization Bypass (XSS)

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute...

5.3CVSS0.00203EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/06/22 3:11 p.m.11 views

CVE-2026-50557

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 22.0.0-rc.2, 21.2.15, 20.3.22 and 19.2.22, an issue in the @angular/compiler and @angular/core packages allows bypassing element and attribute...

6.1CVSS5.8AI score0.00203EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/06/22 6:10 a.m.7 views

postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_restore_attribute_stats()

A flaw was found in PostgreSQL. This buffer over-read vulnerability in the pgrestoreattributestats function allows a table maintainer to infer memory values. By providing array values of unmatched length, a malicious table maintainer can cause query planning to read past the end of an array,...

4.3CVSS6.1AI score0.00208EPSS
SaveExploits0References5
Ubuntu
Ubuntu
added 2026/06/22 2:53 a.m.11 views

USN-8455-1: Netatalk vulnerabilities

Arjun Basnet discovered that Netatalk improperly validated inputs when unmarshalling Spotlight Remote Procedure Call. A remote authenticated attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2026-44066 Arjun Basnet discovered that Netatalk...

7.6CVSS5.9AI score0.00322EPSS
SaveExploits0
Redos
Redos
added 2026/06/22 12:0 a.m.9 views

ROS-20260622-73-0033

The vulnerability of the Go programming language is related to incorrect encoding or escaping of output data when processing the tag’s type attribute. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...

6.1CVSS5.9AI score0.00371EPSS
SaveExploits0
NVD
NVD
added 2026/06/21 4:16 p.m.16 views

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS0.00125EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/21 4:16 p.m.12 views

UBUNTU-CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS5.8AI score0.00125EPSS
SaveExploits0References3
CVE
CVE
added 2026/06/21 3:47 p.m.38 views

CVE-2026-56405

The connected sources specify a vulnerability in libexpat up to version 2.8.2, caused by an integer overflow in getAttributeId. The CVE entry lists this as CVE-2026-56405 with a CVSS v3.1 base score of 6.9 (Medium) and a Local attack vector, requiring high attack complexity, no privileges, and no...

6.9CVSS5.9AI score0.00125EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/21 3:47 p.m.14 views

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS5.9AI score0.00125EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/21 3:47 p.m.45 views

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS0.00125EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/21 3:47 p.m.5 views

CVE-2026-56405

libexpat before 2.8.2 has an integer overflow in getAttributeId...

6.9CVSS6AI score
SaveExploits0References3
Rows per page
Query Builder