44564 matches found
UPS management application Search Uncontrolled Data Compromise
The vulnerability of the UPS management application is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Luban-2040
Luban 2040 v1 Advanced CVE & Exploit Finder Author: m...
OPENSUSE-SU-2026:10579-1 python310-3.10.20-5.1 on GA media
These are all security issues fixed in the python310-3.10.20-5.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10571-1 bouncycastle-1.84-1.1 on GA media
These are all security issues fixed in the bouncycastle-1.84-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10574-1 jetty-annotations-9.4.58-4.1 on GA media
These are all security issues fixed in the jetty-annotations-9.4.58-4.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-118236
Уязвимость функции dev has sync state компонента include/linux/device.h ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2026-118207
Уязвимость функции decompress lznt компонента fs/ntfs3/lznt.c ядра операционной системы Linux связана с выходом операции за границы буфера. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
OPENSUSE-SU-2026:10576-1 python311-jwcrypto-1.5.7-2.1 on GA media
These are all security issues fixed in the python311-jwcrypto-1.5.7-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10573-1 cpp-httplib-devel-0.42.0-1.1 on GA media
These are all security issues fixed in the cpp-httplib-devel-0.42.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10570-1 aardvark-dns-1.17.1-1.1 on GA media
These are all security issues fixed in the aardvark-dns-1.17.1-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-VW3H-Q6XQ-JJM5 OpenClaw: Voice-call realtime WebSocket accepted oversized frames
Summary Voice-call realtime WebSocket accepted oversized frames. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.9 = 2026.4.10 Impact The voice-call realtime WebSocket path could accept oversized frames, creating a remote availability risk for...
OpenClaw: Voice-call realtime WebSocket accepted oversized frames
Summary Voice-call realtime WebSocket accepted oversized frames. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.9 = 2026.4.10 Impact The voice-call realtime WebSocket path could accept oversized frames, creating a remote availability risk for...
EUVD-2025-209469
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform...
JLSEC-2026-129
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
PT-2026-35464
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...
PT-2026-36236
Уязвимость компонента Views браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
PT-2026-35465
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...
PT-2026-35635
Summary Voice-call realtime WebSocket accepted oversized frames. Affected Packages / Versions - Package: openclaw - Ecosystem: npm - Affected versions: = 2026.4.9 = 2026.4.10 Impact The voice-call realtime WebSocket path could accept oversized frames, creating a remote availability risk for...