wifi: p54: validate RX frame length in p54_rx_eeprom_readback()

...

EUVD-2026-52928

Ghost is a Node.js content management system. From 5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to properly sanitize imported content resulting in XSS in post content. This issue is fixed in version 6.54.1...

CVE-2022-21954

creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3791 2026-07-30 00:01:36+00:00| seen| https://t.me/CVEhub/3791...

MINI-2P8C-V54C-JGC5

Bulletin has no description...

MINI-2XCP-54RW-HM93

Bulletin has no description...

CVE-2026-40914

A flaw was found in Apache ActiveMQ Artemis STOMP. An authenticated user with send or consume permission on an address can change that address's routing-type even without createAddress. As a result, send or consume operations that should be rejected for an unsupported routing-type may succeed,...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.54 bug fix and security update

Red Hat OpenShift Container Platform release 4.17.54 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

EUVD-2026-26500

A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Processmrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipulation of the argument -ee results in code injection. Attacking locally is a requirement. Upgrading to version 13.54 i...

CVE-2026-7580 Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection

A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Processmrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipulation of the argument -ee results in code injection. Attacking locally is a requirement. Upgrading to version 13.54 i...

PT-2026-36321

Name of the Vulnerable Software and Affected Versions Exiftool versions prior to 13.54 Description Local code injection is possible through the manipulation of the -ee argument. The issue resides in the Process mrld function within the lib/Image/ExifTool/GM.pm file, specifically affecting the JPE...

CVE-2026-33850

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

CVE-2026-33624

CVE-2026-33624 affects Parse Server. Prior to versions 8.6.60 and 9.6.0-alpha.54, an attacker who knows a user’s password and a valid MFA recovery code can reuse that code indefinitely by sending concurrent login requests, defeating the single‑use design of recovery codes. Impacted component: MFA...

EUVD-2026-14752

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

CVE-2026-33850

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

CVE-2026-33850

CVE-2026-33850 concerns an out-of-bounds write in WujekFoliarz DualSenseY-v2 (affected before v54). The CVSS 3.1 base score is 7.8 (HIGH), with LOCAL attack vector, low complexity, no privileges required, but USER INTERACTION NEEDED. Impacts include confidentiality, integrity, and availability. T...

CVE-2026-33850

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

CVE-2026-33850 Out-of-bounds Write in WujekFoliarz DualSenseY-v2

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

CVE-2026-33850 Out-of-bounds Write in WujekFoliarz DualSenseY-v2

Out-of-bounds Write vulnerability in WujekFoliarz DualSenseY-v2.This issue affects DualSenseY-v2: before 54...

PT-2026-27336

Name of the Vulnerable Software and Affected Versions WujekFoliarz DualSenseY-v2 versions prior to 54 Description An out-of-bounds write issue exists in WujekFoliarz DualSenseY-v2. This allows for potential unauthorized access or modification of data. Recommendations Update WujekFoliarz...

CVE-2026-23516

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.2.0 through 2.54.0, an attacker is able to execute arbitrary JavaScript in a victim user's CVAT UI session, provided that they are able to create a maliciously crafted label in a CVAT task or...