EUVD-2026-100848

The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowing unauthenticated users to make the WP Encryption WordPress plugin before 7.8.8.2 overwrite the site's certificate...

EUVD-2026-100883

The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing...

CVE-2026-92390

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

UBUNTU-CVE-2026-92390

When invoked with --remote-header-name -J, curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an ETag header is processed before Content-Disposition under --etag-save. This flaw allows an HTTPS serve...

CVE-2026-108597

A flaw was found in cohere. An attacker with write permissions to an associated Amazon Simple Storage Service S3 bucket can supply a specially crafted model archive containing directory traversal sequences. When the application extracts the archive without validating member file paths, arbitrary...

CLEANSTART-2026-ZL40658 Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gstavidemuxinvert function which allows a heap overwrite while parsing avi files...

CLEANSTART-2026-SR74236 DOS / potential heap overwrite in qtdemux using zlib decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...

CLEANSTART-2026-MO53582 DOS / potential heap overwrite in mkv demuxing using lzo decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using lzo decompression...

CLEANSTART-2026-VZ54058 DOS / potential heap overwrite in mkv demuxing using zlib decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using zlib decompression...

CLEANSTART-2026-EK48712 DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression...

CLEANSTART-2026-YZ53862 Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files

Security vulnerability affects the gst-plugins-good package. Integer overflow in matroskademux element in gstmatroskademuxaddwvpkheader function which allows a heap overwrite while parsing matroska files...

CLEANSTART-2026-QO62654 DOS / potential heap overwrite in mkv demuxing using bzip decompression

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using bzip decompression...

PT-2026-122350

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in mkv demuxing using bzip decompression...

PT-2026-113784

Name of the Vulnerable Software and Affected Versions NSD versions 4.10.0 through 4.15.2 Description An issue occurs when base64 data is split into pieces of 3 characters or less, causing tokens to be incorrectly calculated as 0 bytes. This allows an attacker to overwrite the stack with up to 64K...

PT-2026-122360

Security vulnerability affects the gst-plugins-good package. DOS / potential heap overwrite in qtdemux using zlib decompression...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130160 advisory. An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate...

PT-2026-122397

Security vulnerability affects the gst-plugins-good package. Integer overflow in avidemux element in gst avi demux invert function which allows a heap overwrite while parsing avi files...

PT-2026-113673

The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowing unauthenticated users to make the WP Encryption WordPress plugin before 7.8.8.2 overwrite the site's certificate...

PT-2026-113662

The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticated attackers to overwrite, permanently erase, reassign or append to any previously submitted form entry by referencing...

PT-2026-114339

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink handling of Fw::FilePacket::StartPacket destination paths FileUplink copies the packet-controlled destinationPath and opens it for writing...