34919 matches found
CVE-2026-24795
Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules. This vulnerability is associated with program files regcomp.C. This issue affects CloverBootloader: before 5162...
CVE-2026-24795 An Out-of-bounds Write in CloverHackyColor/CloverBootloader
Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules. This vulnerability is associated with program files regcomp.C. This issue affects CloverBootloader: before 5162...
CVE-2026-24796 A Out-of-bounds Read vulnerability in CloverHackyColor/CloverBootloader
Out-of-bounds Read vulnerability in CloverHackyColor CloverBootloader MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules. This vulnerability is associated with program files regparse.C. This issue affects CloverBootloader: before 5162...
CVE-2026-24796
CVE-2026-24796 is described as an Out-of-bounds Read vulnerability affecting CloverBootloader (CloverHackyColor) before 5162. The issue involves modules in MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma and is associated with regparse.C. The accessible documents do not provide explicit exp...
CVE-2026-24794
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard src/main/java/org/cardboardpowered/impl/world modules. This vulnerability is associated with program files WorldImpl.Java. This issue affects cardboard: before 1.21.4...
CVE-2026-24794
CVE-2026-24794 affects CardboardPowered/cardboard, specifically the WorldImpl.Java components. It is described as Improper Restriction of Operations within the Bounds of a Memory Buffer and is noted to affect cardboard versions before 1.21.4. The CVSS metrics indicate a CRITICAL base score of 9.2...
CVE-2026-24794 Chunk Unloading Security Vulnerability in CardboardPowered/cardboard
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in CardboardPowered cardboard src/main/java/org/cardboardpowered/impl/world modules. This vulnerability is associated with program files WorldImpl.Java. This issue affects cardboard: before 1.21.4...
EUVD-2026-4716
Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...
CVE-2026-1464
CVE-2026-1464 describes an Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager, specifically in the tar utilities (app/src/main/java/org/apache/commons/compress/archivers/tar modules, TarUtils.Java). The issue affects AppManager versions before 4.0.4. Connected records reiter...
CVE-2026-1464 A possible integer overflow vulnerability in RawTherapee/RawTherapee
Integer Overflow or Wraparound vulnerability in MuntashirAkon AppManager app/src/main/java/org/apache/commons/compress/archivers/tar modules. This vulnerability is associated with program files TarUtils.Java. This issue affects AppManager: before 4.0.4...
CVE-2026-1465
CVE-2026-1465 affects anyRTC-RTMP-OpenSource (before 1.0) via improper restriction of operations within the bounds of a memory buffer in third_party/faad2-2.7/libfaad modules (bits.C, syntax.C). Red Hat, NVD, OSV and CVE lists describe it as a heap-based buffer over-read/overflow in tildearrow/fu...
CVE-2026-1465 A heap-based buffer over-read or buffer overflow in tildearrow/furnace
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-OpenSource thirdparty/faad2-2.7/libfaad modules. This vulnerability is associated with program files bits.C, syntax.C. This issue affects anyRTC-RTMP-OpenSource: before 1.0...
EUVD-2026-4715
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in anyrtcIO-Community anyRTC-RTMP-OpenSource thirdparty/faad2-2.7/libfaad modules. This vulnerability is associated with program files bits.C, syntax.C. This issue affects anyRTC-RTMP-OpenSource: before 1.0...
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
firefox: thunderbird: Use-after-free in the JavaScript: GC component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: GC component...
CVE-2026-24479
HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problemimportqduoj.php and problemimporthoj.php modules fail to properly sanitize filenames within uploaded ZIP archives. Attackers can craft a malicious ZIP file...
CVE-2026-24875: Integer Overflow or Wraparound
Integer Overflow or Wraparound vulnerability in yoyofr modizer.This issue affects modizer: before 4.1.1...
CVE-2026-24795: Out-of-bounds Write
Out-of-bounds Write vulnerability in CloverHackyColor CloverBootloader MdeModulePkg/Universal/RegularExpressionDxe/Oniguruma modules. This vulnerability is associated with program files regcomp.C. This issue affects CloverBootloader: before 5162...
Hono security vulnerability
Hono is a web framework built with TypeScript in the Hono community. Versions of Hono prior to 4.11.7 contained a security vulnerability. This vulnerability stemmed from a static service middleware in the Cloudflare Workers adapter, which allowed information leakage, potentially enabling attacker...
