100952 matches found
The vulnerability of the nr_route_frame() function in the net/netrom/nr_route.c module, which is part of the networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
EulerOS 2.0 SP15 : mutt (EulerOS-SA-2026-2939)
According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest.CVE-2026-43860 mutt before 2.3.2 has an infinite loop ...
CVE-2026-71313
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From v1.51.0 until v1.75.0, the local backend in backend/local/local.go relies on the configurable filename encoder to prevent remote filename data from becoming operating-system path...
GHSA-QHGP-4M99-FHV7 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17847 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17763 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17926 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17996 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-17697 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-71310
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.ReadResponse over an unrestricted buffered reader, allowing a malicious or...
CVE-2026-12872
creationtimestamp| type| source ---|---|--- 2026-08-05 20:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msedouqy5w2a...
CVE-2026-15788
A flaw was found in BuildKit. An untrusted user, when authoring a build on a Windows Container on Windows WCOW configured BuildKit daemon, can exploit a vulnerability in the cache mount source selector. This flaw allows the user to read arbitrary files from the host system, leading to information...
CVE-2026-8478
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...
CVE-2026-17632
IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of Python code during AST-based security scanning...
CVE-2026-7658 Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement
IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This enables multiple severe impacts, including arbitrary directory deletion, cross-tenant data destruction, and JWT signing ke...
CVE-2026-70439
Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality...
CVE-2026-70436
CVE-2026-70436 affects the Jenkins External Workspace Manager Plugin. Affected versions (1.4.1 and earlier) fail in access control when exposing externally-managed workspaces through the workspace browser: 1.4.0 and earlier perform no permission check, while 1.4.1 performs an improper permission ...
CVE-2026-71281
A flaw was found in peft. The LoRA-GA and CorDA initialization modules within Hugging Face peft improperly call torch.load without the weightsonly=True parameter. This oversight allows for full pickle deserialization when loading a malicious cache or covariance file. A remote attacker could explo...
EUVD-2026-53520
IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element...