6863 matches found
python: Python base64: Incomplete data decoding due to premature stop at padding
A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...
CVE-2026-16934
creationtimestamp| type| source ---|---|--- 2026-08-21 01:49:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtknfuvdj72k 2026-08-26 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtx5fbpcwr2u...
SUSE CVE-2026-73619
GitPython before 3.1.57 contains an incomplete denylist in the unsafegitarchiveoptions guard that omits --add-file and --add-virtual-file options. Attackers can supply these options to Repo.archive to read arbitrary files from the filesystem and include them in the returned archive...
CVE-2026-17422
creationtimestamp| type| source ---|---|--- 2026-08-21 00:09:30+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtkhtoeben2b 2026-08-21 00:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtkiygvnyg2y 2026-08-26 18:07:07+00:00| seen|...
MINI-2V67-75PP-8PVF
Bulletin has no description...
MINI-QVJW-MWQJ-F694
Bulletin has no description...
MINI-MHCM-P3CP-4FPF
Bulletin has no description...
CVE-2026-69855
creationtimestamp| type| source ---|---|--- 2026-08-20 23:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtke2fn45p2o 2026-08-21 00:30:56+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtkizz5pi42i...
MINI-4VX6-MFQ5-85G9
Bulletin has no description...
AZL-96924 CVE-2026-77643 affecting package xapian-core 1.4.26-2
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
DEBIAN-CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement
Summary Mailpit's SMTP DATA reader enforces the configured MaxMessageSize only after bufio.Reader.ReadBytes'\n' has already buffered a complete DATA line. A remote unauthenticated SMTP client can send one line larger than the configured message-size cap and force memory allocation before Mailpit...
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...
CVE-2026-77643
Xapian xapian-core versions before 2.1.0 and 1.4.32 are vulnerable due to incomplete HTML escaping in Xapian::MSet::snippet() within queryparser/termgenerator_internal.cc, a missed corner case of CVE-2018-0499. This allows stored XSS when snippet output is rendered in a browser. CVSS 4.4 (MEDIUM)...
CVE-2026-66788
creationtimestamp| type| source ---|---|--- 2026-08-20 19:30:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjya3jrf52b 2026-08-20 20:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtk2fjde2k25...
Incomplete Comparison with Missing Factors
Overview backpack/crud is a package that helps you build an admin interface for your Eloquent models, using Laravel 5 Affected versions of this package are vulnerable to Incomplete Comparison with Missing Factors via the color column rendering process in the Blade template, where the escaped and...
CVE-2026-71428
creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjptu74su2e 2026-08-20 18:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjtavyjyv27 2026-08-20 18:08:51+00:00| seen|...
MINI-32H6-946F-GCCG
Bulletin has no description...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...
CVE-2026-61704 link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostname, allowing an attacker-controlled DNS server to return a public address during validation and a loopback or internal address...