20669 matches found
EUVD-2026-49858
schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on attacker-controlled MP3 metadata...
Multiples vulnerabilities in jsPDF
Brocade SANnav provides security updates for multiple CVEs affecting jsPDF. CVE-2025-68428 sPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given...
PT-2026-65605
Name of the Vulnerable Software and Affected Versions Cosmos versions prior to 0.22.19 Description Cosmos discloses Constellation device metadata to any requester who provides a non-empty Authorization header. The system fails to validate the token provided in the header, stripping the Bearer...
MGASA-2026-0302 Updated libyang packages fix a security vulnerability
The updated packages fix a security vulnerability: Heap Use-After-Free Write in XML Metadata Parsing. CVE-2026-41401...
Updated libyang packages fix a security vulnerability
The updated packages fix a security vulnerability: Heap Use-After-Free Write in XML Metadata Parsing. CVE-2026-41401...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Server-Side Request Forgery (SSRF) in LangChain [CVE-2026-41481]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Server-Side Request Forgery SSRF in LangChain, due to a failure to revalidate to redirect targets, allowing a URL pointing to an attacker-controlled server to potentially redirect to internal, localhost, or cloud metadata endpoints,...
CVE-2026-65922
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
preflight v0.20.0
Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...
CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
CVE-2026-65922
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
CVE-2026-65922
Technical details for CVE-2026-65922 are not publicly provided in the supplied documents; monitor for updates.
EUVD-2026-49583
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...
GO-2026-6079 Gitea: OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation) in gitea.dev
Gitea: OAuth token introspection returns metadata of tokens issued to other clients RFC 7662 section 4 violation in gitea.dev...
GO-2026-6062 Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev
Gitea: Private Repository Metadata Remains Accessible After Access Revocation in gitea.dev...
Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images
Summary Multiple vulnerabilities were addressed in IBM MQ Agent images Vulnerability Details CVEID:CVE-2025-13151 DESCRIPTION: Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1expendoctetstring...
CVE-2026-64490
A flaw was found in the Linux kernel's ALSA virtio sound driver. A malicious or buggy virtio device can provide invalid control metadata, such as an unknown control type or an oversized value count. The driver's control handling trusts this unvalidated metadata, leading to out-of-bounds access wh...
CVE-2026-65922: Missing Authorization
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is...