CVE-2026-115455

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a...

CVE-2026-115455 Gcc: stack overflow in std::bitset on libstdc++

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a...

EUVD-2026-113747

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a...

CVE-2026-115455 Gcc: stack overflow in std::bitset on libstdc++

A flaw was found in GCC libstdc++. When an application extracts data into a bitset from a wide-character stream, internal stack memory allocation fails to properly account for character size and alignment. An attacker capable of supplying crafted input to an affected application could trigger a...

CVE-2025-10377

Proof of Concept CVE-2025-10377 Cross-Site Request Forgery CSRF in Plugin System Dashboard Funtion sdtogglelogs Vulnerability Type: Cross-Site Request Forgery CSRF Affected Function: sdtogglelogs CVSS v3.1: 4.3 Medium Vector: AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N Note: Score reflects unauthorized...

CVE-2026-118634

The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' parameter in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level acces...

CVE-2026-118661

A flaw was found in happy-dom. The cookie management component fails to properly validate and match domain attributes, allowing it to accept cookies for unrelated domains and match hostnames without enforcing domain boundaries. In server-side rendering environments, a remote attacker controlling ...

CVE-2026-118256

A flaw was found in vue-i18n. When parameter escaping is enabled, the library fails to properly sanitize named interpolation values if a translation call contains both list and named parameters. A remote attacker could exploit this vulnerability by supplying untrusted input to an application that...

spring-cloud__spring-cloud-gateway_CVE-2022-22947_3-0-6

//// DO NOT EDIT THIS FILE. IT WAS GENERATED. Manual changes to this file will be lost when it is generated again. Edit the files in the src/main/asciidoc/ directory instead. //// image::https://circleci.com/gh/spring-cloud/spring-cloud-gateway/tree/master.svg?style=svg"CircleCI",...

CVE-2026-119188

A flaw was found in node-forge. A remote attacker can trigger a Denial of Service DoS by sending an unexpected Transport Layer Security TLS record during a fragmented handshake sequence. Because the library fails to cleanly halt processing after closing the invalid connection, it throws an uncaug...

CVE-2026-119187

A flaw was found in node-forge. The Transport Layer Security TLS implementation processes incoming records through recursive function calls instead of an iterative loop. An unauthenticated remote attacker can exploit this flaw by sending a network payload containing a large number of small TLS...

CVE-2026-118764

A flaw was found in minimatch. A remote attacker could exploit this vulnerability to cause a Denial of Service DoS through excessive CPU and memory consumption. By supplying a specially crafted glob expression, an attacker can trigger repetitive pattern segment expansion during compilation at...

CVE-2026-119283

A flaw was found in joserfc. When decrypting a JSON Web Encryption JWE object, the library fails to limit the number of recipient entries processed in a single request. A remote, unauthenticated attacker can exploit this flaw by sending a crafted JWE token with an arbitrarily large recipients...

CVE-2026-119196

A flaw was found in pyasn1. A remote attacker can cause a Denial of Service DoS by sending specially crafted Abstract Syntax Notation One ASN.1 data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data,...

CVE-2026-119195

A flaw was found in pyasn1. A remote attacker can cause a Denial of Service DoS by providing specially crafted ASN.1 Abstract Syntax Notation One encoded data containing numerous fragments. During the decoding of constructed strings or indefinite-length values, the library repeatedly concatenates...

CVE-2026-119194

A flaw was found in pyasn1. A remote attacker could trigger a Denial of Service DoS by sending specially crafted Abstract Syntax Notation One ASN.1 data containing colliding tag identifiers during schemaless decoding. Processing these inputs causes inefficient container lookups that consume...

CVE-2026-118772

A flaw was found in joi. The email validation rule configured to validate multiple addresses uses an inefficient regular expression when splitting input strings. A remote attacker can exploit this flaw by submitting input containing long runs of whitespace, causing excessive computation. This can...

CVE-2026-112900

A flaw was found in Pillow. This vulnerability may allow an attacker to achieve arbitrary code execution when processing Encapsulated PostScript EPS images. Because Pillow invokes the external Ghostscript utility without properly sanitizing user-controlled input filenames, names beginning with...

Exploit for CVE-2026-98432

CVE-2026-98432 checker: Linux TCP use-after-free CVSS 9.8 U...

CVE-2026-112403

A flaw was found in Pillow. A remote attacker could exploit this vulnerability to achieve arbitrary code execution or cause a Denial of Service DoS by supplying a specially crafted lossless JPEG image to an application that downscales images or generates thumbnails. This issue occurs because the...