CVE-2026-73258 Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart

Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mghttpnextmultipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and stop...

CVE-2026-18308 GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2026-18287

aeon (Python time series library, aeon-toolkit/aeon) is vulnerable to code injection in the load_time_series_segmentation_benchmark method. The root cause is the lack of proper validation of a user-supplied string before it is used to execute Python code, allowing an attacker to run arbitrary cod...

CVE-2026-63039

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This allows an attacker to inject the string value into the SQL statement, enabling SQL injection. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to...

CVE-2026-74295

A flaw was found in the Linux kernel, specifically within the ASoC hdachdmi audio codec driver. This vulnerability occurs because the driver does not properly validate an input value used to access an internal data structure. A local attacker could provide a specially crafted input, causing the...

CVE-2026-16932

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper validation of the ODMDIR environment variable...

CVE-2026-16926 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

CVE-2026-16926

CVE-2026-16926 is classified as CWE-73 (External Control of File Name or Path) in IBM AIX 7.2 and 7.3 and PowerVM VIOS 4.1, allowing a remote unauthenticated attacker to overwrite arbitrary files. Fixes are available via AIX Service Packs (7.2 TL05 SP13, 7.3 TL02 SP05, TL03 SP03, TL04 SP02) and V...

EUVD-2026-63386

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...

Microsoft Word Information Disclosure Vulnerability

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox

A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash...

CVE-2026-76344

creationtimestamp| type| source ---|---|--- 2026-08-20 04:46:55+00:00| seen| https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities20260820...

GO-2026-6185 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6188 vulnerabilities

Vulnerabilities for packages: telegraf...

GO-2026-6199 vulnerabilities

Vulnerabilities for packages: telegraf...

GHSA-9VJP-V76F-G363 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-X5MV-8WGW-29HG vulnerabilities

Vulnerabilities for packages: ascan...

EUVD-2026-62969

In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role could execute arbitrary commands on the underlying operating system. The vulnerability is possible because of missing input validation in the app's credential management component, which deserializes stored da...