58986 matches found
CVE-2025-47405
creationtimestamp| type| source ---|---|--- 2026-05-04 19:07:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2emokys72g...
CVE-2026-42090
creationtimestamp| type| source ---|---|--- 2026-05-04 18:02:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2axckja62n...
Missing Authorization
Overview org.apache.polaris:polaris-runtime-service is an a catalog for data lakes. It provides new levels of choice, flexibility and control over data, with full enterprise security and Apache Iceberg interoperability across a multitude of engines and infrastructure Affected versions of this...
CVE-2026-42809
Apache Polaris can issue broad temporary "vended" storage credentials during staged table creation before the effective table location has been validated or durably reserved. Those temporary credentials are meant to limit the scope of accessible table data and metadata, but this scope limitation...
CVE-2026-42078
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...
CVE-2026-38669
wCMS v.1.4 is vulnerable to Cross Site Scripting XSS when creating a new blog...
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2026-42376
creationtimestamp| type| source ---|---|--- 2026-05-04 17:02:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517380246425239 2026-05-04 18:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2autcjzk2f 2026-05-04 18:44:20+00:00| seen|...
CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...
CVE-2026-42078
PVE: CVE-2026-42078 affects PPTAgent, an agentic framework for reflective PowerPoint generation. Before commit 418491a, the code path markdown_table_to_image allows arbitrary file write and directory creation. The issue has been patched via commit 418491a. Impact ranges from low to potentially en...
CVE-2026-42078
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...
CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...
CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary file write and directory creation via markdowntabletoimage. This issue has been patched via commit 418491a...
CVE-2026-41181
creationtimestamp| type| source ---|---|--- 2026-05-04 16:54:31+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-p6hg-qh38-555r 2026-05-05 14:35:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fuoznxy2b 2026-05-05 16:20:01+00:00|...
CVE-2026-42375
creationtimestamp| type| source ---|---|--- 2026-05-04 16:48:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116517327062901025 2026-05-04 18:08:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2bcuhvhu2z 2026-05-04 18:30:01+00:00| seen|...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
CVE-2025-47407
CVE-2025-47407 describes a memory corruption in the DSP service during process creation caused by an allocation failure at the kernel level, linked to a TOCTOU race condition. Connected records identify a kernel-level allocation failure as the underlying trigger and the DSP service as the affecte...
CVE-2025-47407 Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...