312834 matches found
gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
MINI-QVCP-G74M-VQX9
Bulletin has no description...
MINI-FV7X-HWF3-W93G
Bulletin has no description...
MINI-6RRP-65MC-GF26
Bulletin has no description...
MINI-FQVM-3WHV-PVMW
Bulletin has no description...
MINI-486Q-C5C7-P7RH
Bulletin has no description...
MINI-VFRJ-R9W8-43QW
Bulletin has no description...
MINI-3C85-HV46-C5G6
Bulletin has no description...
MINI-QX59-63Q9-XMM2
Bulletin has no description...
MINI-P338-JCXJ-XM9C
Bulletin has no description...
MINI-8FVP-8GC8-GQ83
Bulletin has no description...
MINI-67WR-P5XW-7349
Bulletin has no description...
MINI-RQXP-WWXH-CJFQ
Bulletin has no description...
CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
PT-2026-76686
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap passes attacker-controlled sourceMappingURL values to joindirnameopts.from, annotation, and loadFile permits traversed ...
CVE-2026-50776
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...
PT-2026-76680
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description Hidden or unviewable first-post content is leaked as an excerpt within the...