344719 matches found
CVE-2026-19974 treefrogframework treefrog-framework Session Cookie tsessioncookiestore.cpp strncmp improper authentication
A security flaw has been discovered in treefrogframework treefrog-framework up to 2.11.2. This vulnerability affects the function std::strncmp of the file src/tsessioncookiestore.cpp of the component Session Cookie Handler. The manipulation results in improper authentication. The attack can be...
MINI-6566-PV4V-GR3F
Bulletin has no description...
MINI-WP6C-C68H-VM6X
Bulletin has no description...
PT-2026-76799
Name of the Vulnerable Software and Affected Versions Hugging Face Transformers affected versions not specified Description The software fails to validate shard filenames within checkpoint index files. This allows an attacker to read arbitrary files outside the model directory by providing...
The vulnerability of the bpf_crypto_ctx_release() function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the bpfcryptoctxrelease function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, is related to incorrect type conversion or casting. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the fib6_add_rt2node() function in the net/ipv6/ip6_fib.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fib6addrt2node function in the net/ipv6/ip6fib.c module of the Linux operating system’s IPv6 kernel implementation is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the cs42l43pinprobe() function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output ports allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the cs42l43pinprobe function in the drivers/pinctrl/cirrus/pinctrl-cs42l43.c driver for Linux kernel’s PINCTRL output interface is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the `rockchip_vpu981_av1_dec_init()` function in the driver/media/platform/verisilicon/rockchip_vpu981_hw_av1_dec.c file of the Linux operating system’s multimedia device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rockchipvpu981av1decinit function in the driver/media/platform/verisilicon/rockchipvpu981hwav1dec.c file of the Linux operating system’s multimedia device driver is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to...
Progress MOVEit Transfer < 2025.0.8 / 2025.1.x < 2025.1.4 Path Equivalence (CVE-2026-8801)
The version of Progress MOVEit Transfer installed on the remote host is prior to 2025.0.8 or 2025.1.x prior to 2025.1.4. It is, therefore, affected by a path equivalence vulnerability: - Path equivalence vulnerability in Progress MOVEit Transfer File Upload modules. CVE-2026-8801 Note that Nessus...
Securing AI-Generated Code: A Just-In-Time Vulnerability Detection and Remediation Pipeline
AI-assisted development tools generate vulnerable code at significant rates, yet few automated mechanisms exist to detect, enrich, fix, and verify security issues at development velocity, particularly ones that ground remediation in real-world threat context. This paper presents an automated...
PT-2026-73237
Apache Airflow's XCom GET /api/v2/.../xcomEntries/key?deserialize=true endpoint passed a string-literal payload through BaseXCom.deserialize value without the check forbidden xcom keys guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary airflow...
PT-2026-76889
Impact ServerFilters.GZip and RequestFilters.GunZip and the underlying Gzip functions used to decompress request bodies did not impose any cap on the decompressed size. A small malicious gzip-encoded request body on the order of kilobytes could decompress to gigabytes, exhausting the JVM heap and...
PT-2026-73262
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...
Unity Linux 20.1070e Security Update: pam (UTSA-2026-099450)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099450 advisory. Linux-PAM through 1.7.2 contains an observable timing discrepancy CWE-208 in the pamuserdb module's plaintext-password comparison path in modules/pamuserdb/pamuserdb...
FileRise <= 3.3.0 - Unauthenticated File Read
FileRise = 3.3.0 contains an unauthenticated file read vulnerability caused by a lack of access control on the /uploads directory, letting unauthenticated attackers access uploaded files directly, exploit requires knowledge or guessing of file paths. id: CVE-2026-25231 info: name: FileRise = 3.3....
MINI-C98G-C7JV-X8J9
Bulletin has no description...
MINI-75JM-X7H5-R3VM
Bulletin has no description...
MINI-HG23-RPX9-FV4W
Bulletin has no description...