46885 matches found
PT-2026-81116
Summary The Sakai Conversations tool stores topic and post messages without HTML sanitization, and the frontend renders them using LitElement's unsafeHTML directive, resulting in stored cross-site scripting XSS. Any authenticated user with access to a site that has the Conversations tool enabled...
PT-2026-80827
Name of the Vulnerable Software and Affected Versions Digits versions prior to 9.3 Description An issue allows unauthenticated users to perform privilege escalation. Recommendations Update to a version newer than 9.2...
PT-2026-81043
First off, this is not a criticism of GNOME or the Epiphany development team. String parsing bugs happen to literally every browser engine out there. But the new CVE-2026-77682 is a textbook example of why built-in browser password vaults are a bad idea structurally. The vulnerability is in the...
PT-2026-80842
Unauthenticated PHP Object Injection in FreightCo = 1.1.15 versions...
PT-2026-79805
Name of the Vulnerable Software and Affected Versions EFM ipTIME T24000M versions prior to 14.20.0 Description Improper authentication exists in the Session Validation Handler component. A remote attacker can manipulate the httpcon check session url function to bypass authentication mechanisms...
PT-2026-80923
Name of the Vulnerable Software and Affected Versions rConfig versions 8.0.0 through 8.2.12 Description An authentication bypass exists due to a duplicate Auth::routes call in the routes/web.php file, which inadvertently re-enables the POST /register endpoint after it had been disabled. This allo...
PT-2026-80825
Name of the Vulnerable Software and Affected Versions Notification Master – Real-Time WordPress Notifications With Email, SMS, Webhooks & More versions prior to 1.7.2 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions...
PT-2026-79806
Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions prior to 3.2.7-210907-180535 Description An issue exists in the HTTP Request Handler component where a stack-based buffer overflow occurs. This happens when the strcpy function in the '/goform/aspRemoteApConfTempSend'...
PT-2026-79804
Name of the Vulnerable Software and Affected Versions EFM ipTIME T16000M version 14.20.2 Description Improper authentication occurs within the Session Validation Handler component due to a weakness in the httpcon check session url function. This flaw allows remote exploitation to bypass...
freetype2:ftfuzzer: Heap-buffer-overflow in tt_face_load_varc_glyph
Detailed Report: https://oss-fuzz.com/testcase?key=6574704132161536 Project: freetype2 Fuzzing Engine: afl Fuzz Target: ftfuzzer Job Type: aflasanfreetype2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7b2d372ebf3e Crash State: ttfaceloadvarcglyph ttglyphload...
tarantool:uri_parse_test: Heap-use-after-free in cdata_setptr
Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5666324051984384 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: uriparsetest Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-use-after-free WRITE 8 Crash Address:...
CVE-2026-5388
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...
CVE-2026-5388 justhtml before 1.15.0 Multiple Security Issues
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...
CVE-2026-5388 justhtml before 1.15.0 Multiple Security Issues
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...
EUVD-2026-64652
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...
CVE-2026-5388 justhtml before 1.15.0 Multiple Security Issues
justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers cleanurlvalue/cleanurlinjsstring, HTML serialization, Markdown passthrough htmlpassthrough=True, and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization ...
CVE-2026-5388
justhtml (Python HTML sanitizer library) before 1.15.0 contains multiple sanitization bypass vulnerabilities across URL sanitization helpers, HTML serialization, Markdown passthrough, and custom policy edge cases. Attackers can inject active HTML and JavaScript via vectors such as encoded javascr...
mapserver:owsfuzzer: Stack-buffer-overflow in msLayoutTextSymbol
Project: https://github.com/MapServer/MapServer.git Detailed Report: https://oss-fuzz.com/testcase?key=6243451692449792 Project: mapserver Fuzzing Engine: honggfuzz Fuzz Target: owsfuzzer Job Type: honggfuzzasanmapserver Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address:...
hobbes:fuzz-parse-expr: Heap-buffer-overflow in yylex
Project: https://github.com/morganstanley/hobbes.git Detailed Report: https://oss-fuzz.com/testcase?key=5314345710714880 Project: hobbes Fuzzing Engine: libFuzzer Fuzz Target: fuzz-parse-expr Job Type: libfuzzerasanhobbes Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...
