1118071 matches found
USN-8639-1: libpng vulnerabilities
Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. CVE-2016-10087 It was discovered that libpng incorrectly handled certain malformed images. An...
Security Bulletin: Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling
Summary Langflow OSS supports Agentic Assistant generated components and user-supplied custom Python components for workflow development. Weaknesses in code security scanning, runtime validation, custom component execution paths, and trusted code enforcement could allow authenticated users to...
EUVD-2026-60268
The flashcopy system call is verified by zvrfyflashcopy in drivers/flash/flashutil.c. On builds with CONFIGUSERSPACE enabled, this handler is the kernel-side trust boundary for a user-mode caller. Prior to the fix it validated only the output buffer KSYSCALLMEMORYWRITE and passed the two struct...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75060
In JetBrains PyCharm before 2026.2.1 code execution was possible via unauthenticated Jupyter MCP tools...
CVE-2026-75056
In JetBrains IntelliJ IDEA before 2026.2.1 rCE via Markdown export tool was possible...
CVE-2026-75048
In JetBrains YouTrack before 2026.2.18068 stored XSS via the fenced code-block language label was possible...
CVE-2025-27770
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...
CVE-2025-27772
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /newrun endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be able ...
CVE-2025-27771
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /addprompts endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may be...
CVE-2026-72014
A flaw was found in DRBD, a component of the Linux kernel. A malicious or man-in-the-middle DRBD peer can send a specially crafted data reply with an out-of-range payload size. This incorrect size calculation can lead to an out-of-bounds write, allowing the attacker to copy arbitrary data past a...
Security Bulletin: IBM Storage Defender - Data Protect critical vulnerabilities resolved in Release Defender 2.2.1/Data Protect 7.4.1
Summary IBM Storage Defender: Data Protect critical vulnerabilities resolved in release Defender 2.2.1/Data Protect 7.4.1. The vulnerabilities have been addressed in Data Protect 7.4.1, which is included in IBM Storage Defender 2.2.1 Vulnerability Details CVEID:CVE-2020-14343 DESCRIPTION: A...
CVE-2026-45699
A flaw was found in Netatalk. An integer underflow vulnerability exists in the copydir function of the afpd daemon. This flaw occurs when a file operation crosses a device boundary within an Apple Filing Protocol AFP shared volume. Incorrect calculation of buffer size can lead to a stack-based...
CVE-2026-68479
A flaw was found in the Linux kernel's Bluetooth btrtl module. This vulnerability allows a local attacker to provide a specially crafted firmware patch during Bluetooth setup. This can cause an integer underflow, leading to an oversized read and write operation. Such an operation can result in...
kernel: dlm: validate length in dlm_search_rsb_tree
A flaw was found in the Linux kernel's Distributed Lock Manager dlm module. An attacker could send specially crafted network messages with an oversized length parameter to the dlmdumprsbname function. This lack of validation can lead to an out-of-bounds write in the dlmsearchrsbtree function,...
CVE-2026-72003
A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1 code execution via Quick Documentation was possible...
CVE-2026-75059
In JetBrains PyCharm before 2026.2.1, the Quick Documentation feature allows local code execution with no privileges required. Attack requires user interaction, rated CVSS 4.4 (MEDIUM). Fix: upgrade to 2026.2.1. No in-the-wild exploitation reported. Reference: https://www.jetbrains.com/privacy-se...
