990306 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-95101
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with proxyrequestbuffering on directive, an...
PT-2026-114189
Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX Open Source affected versions not specified Description An issue exists when a location is configured using the alias directive combined with rewrite and a set or return directive that reference...
PT-2026-114361
Name of the Vulnerable Software and Affected Versions NGINX Plus affected versions not specified NGINX Open Source affected versions not specified Description A Use-After-Free UAF issue exists in the ngx http core module module. When asynchronous file I/O AIO is enabled in specific configurations...
Perturbed-Embedding-Vectors
Jailbreaking Open-Weight LLMs via Random Embedding Perturbations: runs, labels and code Code and data for the paper Jailbreaking Open-Weight LLMs via Random Embedding Perturbations. Authored by the amazing people of the Theoretical Computer Science Department of University of California, Santa...
CVE-2019-13288
Xpdf version 4.02 2019-sep-25 The Xpdf software and documentation are copyright 1996-2019 Glyph & Cog, LLC. Email: [email protected] WWW: http://www.xpdfreader.com/ The PDF data structures, operators, and specification are documented in ISO 32000-2:2017. What is Xpdf? Xpdf is an open source...
CVE-2026-83646
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...
CVE-2026-83500
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-103576
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-103576
A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-601 . While a base score of 6.5 is assigned, the do...
CVE-2026-83646
A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an authorized attacker to perform spoofing over a network. The vulnerability is categorized under CWE-601 and has a Medium base severity score of 4.8. No...
CVE-2026-83500
A URL redirection to an untrusted site (open redirect) vulnerability exists in Windows BitLocker . This flaw allows an unauthorized attacker to perform a physical attack to bypass a security feature. No specific exploit code or in-the-wild exploitation details are provided in the documents. Remed...
Detection-and-Mitigation-for-CVE-2022-2639
Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...
CVE-2026-93187
A flaw was found in the Linux kernel's Sound Open Firmware SOF IPC4 topology component. When internal functions sofipc4widgetsetupcompsrc and sofipc4widgetsetupcompasrc are invoked with an invalid number of input or output formats specifically, zero, they incorrectly report a successful operation...
CVE-2026-66057
The Frappe web application framework is vulnerable to an Open Redirect (CWE-601) because the OAuth login flow fails to sanitize a client-controlled state parameter . This parameter is used to determine post-authentication navigation, allowing an attacker to craft a state value that redirects user...
CVE-2026-66057 Frappe: Open Redirect via Unsanitized OAuth State Param.
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fix...
CVE-2026-66057
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fix...
CVE-2026-66057 Frappe: Open Redirect via Unsanitized OAuth State Param.
Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentication navigation, allowing a crafted state value to redirect a user to an attacker-chosen location. This issue is fix...
CVE-2026-90196
A flaw was found in the Linux kernel's Sound Open Firmware SOF component. This vulnerability occurs due to improper validation of topology mixer volume ranges. An attacker could potentially provide malformed volume range values, leading to an integer overflow during memory allocation. This could...
Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...