10787 matches found
UBUNTU-CVE-2026-49282
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
CVE-2026-49282
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
CVE-2026-49282
Capstone (disassembly framework) vulnerability CVE-2026-49282 affects builds prior to 6.0.0-Alpha9: the cs_insn_name() API forwards caller-provided instruction IDs to architecture backends, with M68K and RISCV backends lacking sufficient bounds checks. A caller-controlled invalid instruction ID o...
CVE-2026-49282 Capstone M68K and RISCV `cs_insn_name()` invalid IDs can trigger out-of-bounds reads and process crashes
Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's public csinsnname API forwards caller-supplied instruction IDs directly to the selected architecture backend. Most backends validate the ID before indexing instruction-name tables, but the M68K and RISCV backends have...
CVE-2026-19838
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-19836
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...
CVE-2026-19838
CVE-2026-19838 affects Webkul Bagisto up to 2.4.4, targeting the Backend Reporting Endpoint under /admin/reporting/sales/. The issue is an authorization bypass in an unknown code path of the Backend Reporting Endpoint, with remote exploitation possible. Public exploitation has been disclosed. The...
EUVD-2026-58710
A security vulnerability has been detected in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/reporting/sales/ of the component Backend Reporting Endpoint. The manipulation leads to authorization bypass. Remote exploitation of the attack is possible. The...
CVE-2026-19836 Webkul Bagisto Backend Customer Detail Feature view authorization
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...
EUVD-2026-58682
A security flaw has been discovered in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/customers/view of the component Backend Customer Detail Feature. Performing a manipulation of the argument ID results in authorization bypass. The attack may ...
GO-2025-3635 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble, hubble-fips...
GO-2024-2656 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
GO-2025-4167 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
GO-2026-5914 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, kubescape, kubescape-operator-fips, kubescape-server, hubble-ui, kubescape-operator, hubble-ui-backend-fips...
GO-2024-2653 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
GO-2024-2657 vulnerabilities
Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...
GO-2026-5400 vulnerabilities
Vulnerabilities for packages: kubescape-server-fips, kubescape, kubescape-operator-fips, kubescape-server, hubble-ui, kubescape-operator, hubble-ui-backend-fips, hubble-fips...
GO-2026-4772 vulnerabilities
Vulnerabilities for packages: envoy-gateway, kine, spire-server, envoy-gateway-fips, commercial-expanso-edge, kots, commercial-chainloop-backend, commercial-grafana, k3s...