WordPress Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor plugin <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutentor Block HTML vulnerability

WordPress Gutentor - Gutenberg Blocks - Page Builder for Gutenberg Editor plugin = 3.5.5 - Authenticated Contributor+ Stored Cross-Site Scripting via Gutentor Block HTML vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Gutentor versions = 3.5.5...

SUSE CVE-2026-31448

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to physical blocks, if inserting a new extent into the extent tree fails in this example, because the file system disabled th...

SUSE CVE-2026-31463

In the Linux kernel, the following vulnerability has been resolved: iomap: fix invalid folio access when iblkbits differs from I/O granularity Commit aa35dd5cbc06 "iomap: fix invalid folio access after folioendread" partially addressed invalid folio access for folios without an ifs attached, but ...

PT-2026-34683

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version v13 Description The TDDPv2 debug protocol uses DES-CBC encryption with a cryptographic key derived from default web management credentials. This makes the key predictable when the device maintains its default...

CODESYS EtherNetIP code-related vulnerabilities

CODESYS EtherNetIP is an Ethernet-based industrial protocol developed by the German company CODESYS. There is a code vulnerability in CODESYS EtherNetIP, which stems from exhausting all available TCP connections. This vulnerability could allow unauthorized remote attackers to prevent legitimate...

UBUNTU-CVE-2026-5761

virtio-blk: zone report buffer out-of-memory...

CVE-2026-5761

virtio-blk: zone report buffer out-of-memory...

Linux kernel Block Buffer Overflow DoS

The vulnerability of the blkregisterqueue function in the block/blk-sysfs.c module, which is part of the Linux kernel’s block-level support, relates to the absence of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to...

CVE-2026-33471

nimiq-block contains block primitives to be used in Nimiq's Rust implementation. SkipBlockProof::verify computes its quorum check using BitSet.len, then iterates BitSet indices and casts each usize index to u16 slot as u16 for slot lookup. Prior to version 1.3.0, if an attacker can get a...

Marko: XSS via case-insensitive script/style closing tag bypass in runtime HTML escaping

Summary When dynamic text is interpolated into a or tag the Marko runtime failed to prevent tag breakout when the closing tag used non-lowercase casing. An attacker able to place input inside a or block could break out of the tag with , , etc. and inject arbitrary HTML/JavaScript, resulting in...

CVE-2026-34065

nimiq-primitives contains primitives e.g., block, account, transaction to be used in Nimiq's Rust implementation. Prior to version 1.3.0, an untrusted p2p peer can cause a node to panic by announcing an election macro block whose validators set contains an invalid compressed BLS voting key. Hashi...

CVE-2026-34065

CVE-2026-34065 affects nimiq-primitives in Nimiq’s Rust implementation. Before version 1.3.0, an untrusted p2p peer could cause a node to panic by announcing an election macro block whose validators set includes an invalid compressed BLS voting key. Hashing the election macro header hashes the va...

CVE-2026-34064 nimiq-account: Vesting insufficient funds error can panic

nimiq-account contains account primitives to be used in Nimiq's Rust implementation. Prior to version 1.3.0, VestingContract::canchangebalance returns AccountError::InsufficientFunds when newbalance balance, the node crashes while trying to return an error. The mincap balance precondition is...

nimiq-blockchain: Peer-triggerable panic during history sync

Impact HistoryStore::puthistorictxns uses an assert! to enforce invariants about HistoricTransaction.blocknumber must be within the macro block being pushed and within the same epoch. During history sync, a peer can influence the history: &HistoricTransaction input passed into...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34068 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34068 Source advisory: OSV:GHSA-PF4J-PF3W-95F9...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34067 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34067 Source advisory: GHSA-264V-M8FM-76JM...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +6 more potentially affected by CVE-2026-34067 via nimiq-transaction (>=0.1.0, <=0.2.0)

nimiq-transaction CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34067 Source advisory: OSV:GHSA-264V-M8FM-76JM...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-34065 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34065 Source advisory: OSV:GHSA-7C4J-2M43-2MGH...

EUVD-2026-25062

nimiq-primitives: Node crash due to missing interlink validation in election macro block proposals...

nimiq-account (>=0.1.0, <=0.2.0), nimiq-accounts (>=0.1.0, <=0.2.0) +7 more potentially affected by CVE-2026-34065 via nimiq-primitives (>=0.1.0, <=0.2.0)

nimiq-primitives CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-34065 Source advisory: GHSA-7C4J-2M43-2MGH...