58340 matches found
CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity
A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...
CVE-2026-53005
creationtimestamp| type| source ---|---|--- 2026-06-28 20:04:15+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpergdjq6r2l...
MINI-65WX-H36C-MF6J
Bulletin has no description...
EUVD-2026-39991
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqttprotocol.cc of the component MQTT Goodbye Handler. Performing a manipulation of the argument sessionid results in denial of service. The...
CVE-2026-13491 78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqttprotocol.cc of the component MQTT Goodbye Handler. Performing a manipulation of the argument sessionid results in denial of service. The...
CVE-2026-13491
The CVE-2026-13491 entry concerns 78 xiaozhi-esp32 (up to version 2.2.6) and identifies a vulnerability in the MQTT Goodbye Handler. The issue lies in Application::GetInstance within main/protocols/mqtt_protocol.cc, where manipulating the session_id argument can trigger a denial of service. The a...
CVE-2026-13491
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqttprotocol.cc of the component MQTT Goodbye Handler. Performing a manipulation of the argument sessionid results in denial of service. The...
CVE-2026-58055
creationtimestamp| type| source ---|---|--- 2026-06-28 05:58:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdc63a6bz2s 2026-06-29 20:02:56+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphbsvl2sy2c 2026-06-29 21:45:07+00:00| seen|...
CVE-2026-13482 skypilot-org skypilot User ID server.py username.encode weak hash
A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The manipulation results in use of weak hash. The attack may be performed from remote. This attack is characterized by hig...
CVE-2026-13482
CVE-2026-13482 affects skypilot-org/skypilot
CVE-2026-10646 Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation
Zephyr's BSD-sockets getaddrinfo implementation subsys/net/lib/sockets/getaddrinfo.c passes a pointer to a stack-allocated state object struct getaddrinfostate aistate as the userdata of an asynchronous DNS resolver query. The socket layer waits on a semaphore with a timeout deliberately set...
SUSE CVE-2026-53283
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in rlookupamdiommu iommudeviceregister walks every device on the PCI bus via busforeachdev and calls amdiommuprobedevice for each. The inlined checkdevice path computes the device's sbdf, calls...
The vulnerability of the drm_edid_get_panel_id() function in the drivers/gpu/drm/drm_edid.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux kernel allows a malicious actor to access protected information or cause service failure.
The vulnerability of the drmedidgetpanelid function in the drivers/gpu/drm/drmedid.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel exposes confidential information. Exploiting this vulnerability could allow an attacker to access protected information or cause servi...
PT-2026-53163
Name of the Vulnerable Software and Affected Versions volcengine OpenViking versions prior to 0.3.22 Description Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the str to uint64 function located in the...
PT-2026-53104
Name of the Vulnerable Software and Affected Versions xiaozhi-esp32 versions prior to 2.2.7 Description A remote denial of service can be triggered through the manipulation of the session id argument. This issue resides within the Application::GetInstance function located in the main/protocols/mq...
Linux Distros Unpatched Vulnerability : CVE-2026-13282
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Payments in Google Chrome on Android prior to 149.0.7827.201 allowed a local attacker to potentially exploit heap corruption via physical acce...
Linux Distros Unpatched Vulnerability : CVE-2026-53031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Validate nodeid in arenaallocpages arenaallocpages accepts a plain int nodeid and forwards it through the entire allocation chain without any bounds...
Linux Distros Unpatched Vulnerability : CVE-2026-53187
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Validate cpuid against nrcpuids in DMAH alloc The cpuid attribute supplied by user space through UVERBSATTRALLOCDMAHCPUID is passed directly to...
CVE-2026-44967
creationtimestamp| type| source ---|---|--- 2026-06-27 16:07:36+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbtqau2xk2b 2026-06-27 16:07:37+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpbtqbhhhg2h 2026-06-27 16:07:37+00:00| seen|...