CVE-2022-4996

In mruby 3.1.0, the udiv function in bigint.c uses an incorrect operator for floating-point comparison, enabling a remote denial-of-service attack; a proof-of-concept exploit exists and an official fix is available, so upgrading to the patched version is recommended.

PT-2026-78868

Name of the Vulnerable Software and Affected Versions mruby version 3.1.0 Description A flaw exists in the udiv function within the bigint.c file. A remote attacker can perform a manipulation that results in a floating point comparison using an incorrect operator. Recommendations Apply a patch to...

Linux fat kernel DoS

The fat module vulnerability in the Linux kernel is related to a whole-number loss of integrity. Exploitation of this vulnerability may allow an attacker to cause a denial of service by using a corrupted FAT image...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099511)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099511 advisory. Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JS...

Unity Linux 20.1070e Security Update: log4j (UTSA-2026-099531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099531 advisory. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue...

JLSEC-2026-1305

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

CVE-2026-28170

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

EUVD-2026-57955

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170 WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

CVE-2026-28170

CVE-2026-28170 affects the WordPress Blog Floating Button plugin, versions

WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by hivesec in WordPress Plugin Blog Floating Button versions = 1.4.20...

CVE-2026-28170: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Blog Floating Button = 1.4.20 versions...

PT-2026-80547

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A floating point exception FPE due to an integer divide by zero was found in Exiv2 versions v0.27.4 and earlier. The FPE is triggered when Exiv2 is used to print the metadata...

PT-2026-71521

Name of the Vulnerable Software and Affected Versions Blog Floating Button versions prior to 1.4.21 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts into pages, which...

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

UBUNTU-CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

CVE-2026-18888

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer. When an application reads a sufficiently large floating point value as text, the driver may write beyond the end of that buffer and corrupt...

CVE-2026-18888

CVE-2026-18888 : The MongoDB BI Connector ODBC Driver converts floating point column values into text without verifying that the resulting string fits the destination buffer, which can allow writing past the end of the buffer and corrupt adjacent memory when reading large values. Reported impact ...