52809 matches found
CVE-2026-58586
Image::WebP versions through 0.2 for Perl bundle a vulnerable version of libwebp. Image::WebP does not link to the system libwebp. Instead, it uses a bundled copy of libwebp 0.3.0 released 2013-03-20. That version has multiple known vulnerabilities, including CVE-2023-4863. Any caller that decode...
CVE-2026-66005
Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allows network-adjacent attackers to bypass trusted host restrictions by exploiting the server's replacement of user-configured trusted hosts with a wildcard that reflects...
CVE-2026-16801
Improper control of generation of code 'Code Injection' in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with variable write permission to execute arbitrary PowerShell code via a crafted variable value that is not properly escaped when...
CVE-2026-55731
Unchecked input for loop condition CWE-606 in the SNMP agent in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an unauthenticated remote attacker to cause persistent denial of service CPU exhaustion via a crafted SNMP GETNEXT request with...
CVE-2026-55729
Exposure of Sensitive Information CWE-200 in LWEB802 browser localStorage in Loytec LWEB-802 before 5.0.8 on all platforms allows an unauthenticated remote attacker to leak stored management credentials via a crafted link...
CVE-2026-45813
Out-of-bounds Write, Integer Underflow Wrap or Wraparound vulnerability in Apache NimBLE BASS service. Improper validation when parsing BASS service "Add Source" and "Modify Source" operation PDU could results in stack buffer overflow or arbitrary out-of-bound read. This can be triggered by nearb...
CVE-2026-45812
Incorrect Calculation of Buffer Size vulnerability in Apache NimBLE when processing Legacy Advertising Report HCI event. When a single HCI advertising report event bundles multiple reports, NimBLE miscalculated the offset to the next report. This can cause the host to read past the end of the...
CVE-2026-66142
creationtimestamp| type| source ---|---|--- 2026-07-24 12:43:05+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfeve5pmb2u...
CVE-2026-45816 Apache NimBLE: NULL pointer dereference vulnerability in SMP LTK request
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts otherwise assert would trigger before NULL dereference and bogus or misbehaving controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are...
CVE-2026-45815
Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response BLEATTOPREADMULTVARRSP may trigger assert in ATT parser. Severity is medium as this requires DUT to first send ATT Read Multiple Variable Request. This issue affects Apache NimBLE: through...
CVE-2026-15687
creationtimestamp| type| source ---|---|--- 2026-07-24 11:17:39+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116974672857179821...
CVE-2026-16733
A flaw was found in bahmutov find-cypress-specs. A local attacker can exploit a vulnerability in the Branch Handler component by manipulating the '--branch' argument. This manipulation leads to an operating system OS command injection, allowing the attacker to execute arbitrary commands on the...
CVE-2026-7483
creationtimestamp| type| source ---|---|--- 2026-07-24 10:15:43+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrf4nvc42o2v 2026-07-24 13:25:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhaohidj2g...
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
CVE-2026-16634
TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99. The tomlc99 library is no longer maintained, and has an uncontrolled recursion vulnerability publicly reported in the issue tracker. Any caller that passes untrusted TOML to fromtoml risks a stack...
CVE-2026-49743
The CVE describes a vulnerability in a GPU driver kernel interaction: during workload submission involving a fence exported by the GPU driver, the reference count of the underlying synchronisation primitive is not correctly incremented. This can allow a use-after-free when the exported fence is d...
CVE-2026-56820 vulnerabilities
Vulnerabilities for packages: tez, pinot...
CVE-2026-56822 vulnerabilities
Vulnerabilities for packages: tez, pinot...