23976 matches found
PT-2026-41151
Name of the Vulnerable Software and Affected Versions go-billy versions prior to 5.9.0 Description Multiple path traversal issues exist across different components of the software due to insufficient path sanitization and boundary enforcement. This allows crafted paths, such as those using .., to...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gstreamer1-plugins-base (UTSA-2026-021387)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-021387 advisory. GStreamer JPEG Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...
Vvveb 安全漏洞
Vvveb is a powerful and easy-to-use CMS developed by Givan’s individual developers. It is used to build websites, blogs, or e-commerce stores. Versions of Vvveb prior to 1.0.8.3 contained security vulnerabilities. These vulnerabilities stemmed from the Base::init function being repeatedly called ...
CVE-2026-44006
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0...
CVE-2026-44006 vm2: Sandbox Escape
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, It is possible to reach BaseHandler.getPrototypeOf, which can be used to get arbitrary prototypes. This vulnerability is fixed in 3.11.0...
Prototype Pollution
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Prototype Pollution via the pagination parameter in the HTTP Request node. An attacker can execute arbitrary code on the instance by achieving global prototype pollution and chaining this with other...
Prototype Pollution
Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Prototype Pollution in the Xml class, which implements an XML node. A user with permission to create or modify workflows can achieve remote code execution on the host system. Note: This is a bypass ...
ai.ylyue:yue-library-base (finchley.sr2.sr1), ai.ylyue:yue-library-data-jdbc (finchley.sr2.sr1) +712 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.34)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ai.ylyue:yue-library-base finchley.sr2.sr1 - ai.ylyue:yue-library-data-jdbc...
com.wavefront:proxy (>=10.5, <=10.9), org.apache.cxf.systests:cxf-systests-cdi-base (3.3.11) +31 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.5.66)
org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.66 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.wavefront:proxy =10.5, =4.1.0.alpha1, =4.1.0.alpha1, =4.1.0.alpha1, =4.1...
EUVD-2026-29507
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability CWE-502 in the BaseLabeler.load method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load function on user-supplied file paths without any validation or...
GHSA-FQ92-QC8F-482V Snorkel BaseLabeler.load uses an unsafe pickle.load
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability CWE-502 in the BaseLabeler.load method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load function on user-supplied file paths without any validation or...
Snorkel BaseLabeler.load uses an unsafe pickle.load
The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability CWE-502 in the BaseLabeler.load method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load function on user-supplied file paths without any validation or...
2026-05 .NET 10.0.8 Security Update for ARM64 Client (KB5093446)
2026-05 .NET 10.0.8 Security Update for ARM64 Client KB5093446...
2026-05 .NET 9.0.16 Security Update for x64 Client (KB5093448)
2026-05 .NET 9.0.16 Security Update for x64 Client KB5093448...
2026-05 .NET 8.0.27 Security Update for x64 Client (KB5093447)
2026-05 .NET 8.0.27 Security Update for x64 Client KB5093447...
2026-05 .NET 9.0.16 Security Update for x86 Client (KB5093448)
2026-05 .NET 9.0.16 Security Update for x86 Client KB5093448...
2026-05 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5087538)
2026-05 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5087538...
2026-05 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 for x64 (KB5087065)
2026-05 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1607 for x64 KB5087065...