PT-2026-46939

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A stack-based buffer overflow exists in the X.Org X server and Xwayland. The function XkbSetMapChecks declares a fixed-size stack buffer...

PT-2026-33777

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description A Server-Side Request Forgery SSRF issue exists in the Glances IP plugin due to improper validation of the public api configuration parameter. The value of public api is passed directly to the urlope...

PT-2026-33778

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description The Cassandra export module glances/exports/glances cassandra/ init .py interpolates configuration values directly into CQL statements without validation. A user with write access to glances.conf can...

PT-2026-33769

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An issue in the SGLang high-performance LLM serving framework allows remote code execution. The flaw exists in the serving rerank.py file, specifically within the /v1/rerank endpoint. The syst...

PT-2026-33847

Name of the Vulnerable Software and Affected Versions LMDeploy versions prior to 0.12.3 Description A Server-Side Request Forgery SSRF issue exists in the vision-language module of LMDeploy, a toolkit for compressing, deploying, and serving large language models. The load image and encode image...

PT-2026-33776

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description The web server exposes a REST API endpoint '/api/4/' that is accessible without authentication. Due to a permissive Cross-Origin Resource Sharing CORS policy, specifically the...

PT-2026-46942

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description An out-of-bounds read flaw exists in the glXDisp ChangeDrawableAttributes function. Due to an incorrect size validation check, the system may...

PT-2026-33857

Name of the Vulnerable Software and Affected Versions wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin versions prior to 6.5.0.5 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping in the prepareCellOutput function of...

ffmpeg:ffmpeg_BSF_DTS2PTS_fuzzer: Heap-buffer-overflow in cmp_insert

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6032368162111488 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegBSFDTS2PTSfuzzer Job Type: libfuzzerasani386ffmpeg Platform Id: linux Crash Type:...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in DwaCompressor_uncompress

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5998038220079104 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcorecheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Cras...

wasmtime:gc_ops: Crash in <wasmtime::runtime::func::Func>::call_unchecked_raw::<wasmtime_fuzzing::oracles:

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5176018876039168 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: gcops Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x76f71f9b03b8...

wasmtime:wast_tests: Crash in <wasmtime::runtime::func::Func>::call_unchecked_raw::<

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4937916005810176 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: wasttests Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

skcms:iccprofile_transform: Heap-buffer-overflow in skcms_private::baseline::clut

Project: https://skia.googlesource.com/skcms.git Detailed Report: https://oss-fuzz.com/testcase?key=4775888633004032 Project: skcms Fuzzing Engine: libFuzzer Fuzz Target: iccprofiletransform Job Type: libfuzzerasani386skcms Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

poppler:qt_annot_fuzzer: Crash in XRef::parseEntry

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4749375531450368 Project: poppler Fuzzing Engine: afl Fuzz Target:...

checkstyle:CheckstyleFuzzer: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

Detailed Report: https://oss-fuzz.com/testcase?key=6697858849112064 Project: checkstyle Fuzzing Engine: libFuzzer Fuzz Target: CheckstyleFuzzer Job Type: libfuzzerubsancheckstyle Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

open62541:fuzz_config_json_15: Use-of-uninitialized-value in parseJSONConfig

Project: https://github.com/open62541/open62541.git Detailed Report: https://oss-fuzz.com/testcase?key=6588648031322112 Project: open62541 Fuzzing Engine: libFuzzer Fuzz Target: fuzzconfigjson15 Job Type: libfuzzermsanopen62541 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

md4c:fuzz-mdhtml: Heap-buffer-overflow in enter_block_callback

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=6312313526484992 Project: md4c Fuzzing Engine: afl Fuzz Target: fuzz-mdhtml Job Type: aflasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x7876a97e00bc Crash State:...

PT-2026-33640

Name of the Vulnerable Software and Affected Versions mailcow: dockerized versions prior to 2026-03b Description A second-order SQL injection exists in the Mailcow API. The endpoint '/api/v1/add/mailbox' stores the quarantine category variable without proper validation or sanitization. This value...

PT-2026-33833

Name of the Vulnerable Software and Affected Versions Rclone versions 1.48.0 through 1.73.4 Description The RC endpoint "operations/fsinfo" is exposed without authentication and accepts attacker-controlled fs input. Since the rc.GetFs function supports inline backend definitions, an unauthenticat...

PT-2026-33643

Name of the Vulnerable Software and Affected Versions Apache Doris MCP Server versions prior to 0.6.1 Description An improper neutralization flaw in query context handling within the MCP query execution interface may allow the execution of unintended SQL statements. This can lead to the bypass of...