183737 matches found
CVE-2026-63654
Frappe (full-stack web application framework) versions 16.31.0 and earlier contain a vulnerability in the frappe.model.workflow.bulk_workflow_approval endpoint in frappe/model/workflow.py. The whitelisted endpoint is not restricted to POST , meaning it accepts safe HTTP methods (e.g., GET) for st...
CVE-2026-72847
broot , a terminal-based file tree viewer, is vulnerable to terminal escape sequence injection via unsanitized file and directory names. The tree view renders names using a plain to_string_lossy() call in src/tree_build/builder.rs and TreeLine::unprune in src/tree/tree_line.rs, with no control-ch...
EUVD-2026-63488
broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...
CVE-2026-18279
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...
CVE-2026-75140
creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjpvckg5f26...
CVE-2026-55642
creationtimestamp| type| source ---|---|--- 2026-08-20 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjptsgum62u 2026-08-20 18:08:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtjtoit24a2e 2026-08-22 05:40:03+00:00| seen|...
MINI-48C6-4GH5-Q24G
Bulletin has no description...
MINI-QJRR-GP4X-R6CJ
Bulletin has no description...
MINI-R6XM-WJR7-WMX4
Bulletin has no description...
MINI-6C86-4HMF-XQ53
Bulletin has no description...
MINI-32H6-946F-GCCG
Bulletin has no description...
MINI-FV97-3MWW-8V2H
Bulletin has no description...
MINI-XR5R-WR45-G29X
Bulletin has no description...
MINI-3WX3-QC4W-HV3H
Bulletin has no description...
CVE-2026-64970
creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:24+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...
CVE-2026-63038
creationtimestamp| type| source ---|---|--- 2026-08-20 16:39:55+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtjopqokh22y 2026-08-20 18:26:21+00:00| seen| https://infosec.exchange/ap/users/116797276219291526/statuses/117128823263544759...
CVE-2026-55586
SumatraPDF 3.6.1 and earlier (Windows) contains a heap out-of-bounds write in the vendored CHMLib LZX decompressor. A crafted CHM file can supply malformed Huffman code lengths to make_decode_table in ext/CHMLib/lzx.c. In the long-code branch, internal nodes are written via next_symbol before val...
CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
EUVD-2026-63427
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exist...
EUVD-2026-63426
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...