Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the overlay process. An attacker can cause a crash or potentially access sensitive memory contents by providing a crafted HEIF file that triggers incorrect indexing into the alpha buffer during image compositing...

CVE-2026-43945

creationtimestamp| type| source ---|---|--- 2026-05-19 18:34:17+00:00| published-proof-of-concept| https://github.com/frangoteam/FUXA/security/advisories/GHSA-p69w-mmfv-xrfj...

[SECURITY] Fedora 44 Update: rust-ingredients-0.2.2-4.fc44

Check ingredients of published Rust crates...

[SECURITY] Fedora 43 Update: rust-ingredients-0.2.2-4.fc43

Check ingredients of published Rust crates...

CVE-2026-47396

creationtimestamp| type| source ---|---|--- 2026-05-19 06:34:59+00:00| published-proof-of-concept| https://github.com/MervinPraison/PraisonAI/security/advisories/GHSA-86qc-r5v2-v6x6 2026-07-21 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr6axknrdb2a...

CVE-2026-47268

creationtimestamp| type| source ---|---|--- 2026-05-19 01:15:10+00:00| published-proof-of-concept| https://github.com/nezhahq/nezha/security/advisories/GHSA-6x26-5727-rrm9...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the JP2 encoder. An attacker can cause a single-byte heap buffer overwrite by specifying certain options. Remediation A fix was pushed into the master branch but not yet published. References - GitHub Advisory -...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the fx operation. An attacker can cause a denial of service by supplying a specially crafted argument that triggers a stack overflow. Remediation A fix was pushed into the master branch but not yet published...

CVE-2026-47208

creationtimestamp| type| source ---|---|--- 2026-05-18 12:46:19+00:00| published-proof-of-concept| https://github.com/patriksimek/vm2/security/advisories/GHSA-76w7-j9cq-rx2j 2026-06-14 09:00:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moafsggt2e2a 2026-07-09...

CVE-2026-45670

creationtimestamp| type| source ---|---|--- 2026-05-18 11:08:05+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-6m52-m754-pw2g...

CVE-2026-45669

creationtimestamp| type| source ---|---|--- 2026-05-18 11:07:53+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-fx6j-w5w5-h468...

EUVD-2026-30729

A flaw has been found in projectworlds hospital-management-system-in-php 1.0. Affected by this vulnerability is the function getAllPatientDetail of the file updateinfo.php of the component GET Parameter Handler. Executing a manipulation of the argument appointmentno can lead to sql injection. The...

PT-2026-41594

A flaw has been found in Edimax BR-6428NS 1.10. This affects the function formL2TPSetup of the file /goform/formL2TPSetup of the component POST Request Handler. This manipulation of the argument L2TPUserName causes buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-8766 Kilo-Org kilocode Environment Variable config.ts load information disclosure

A flaw has been found in Kilo-Org kilocode up to 7.0.47. This issue affects the function Load of the file packages/opencode/src/config/config.ts of the component Environment Variable Handler. Executing a manipulation of the argument KILOCONFIGCONTENT can lead to information disclosure. It is...

CVE-2026-8730 Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service

A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogssbinfinstancesetid in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been...

CVE-2026-8730 Open5GS NRF context.c ogs_sbi_nf_instance_set_id denial of service

A flaw has been found in Open5GS up to 2.7.6. This impacts the function ogssbinfinstancesetid in the library /lib/sbi/context.c of the component NRF. Executing a manipulation of the argument nfInstanceId can lead to denial of service. The attack may be performed from remote. The exploit has been...

CVE-2026-46701

creationtimestamp| type| source ---|---|--- 2026-05-16 15:11:55+00:00| published-proof-of-concept| https://github.com/Jovancoding/Network-AI/security/advisories/GHSA-j3vx-cx2r-pvg8 2026-06-17 22:38:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojevvheah2c 2026-06-19...

CVE-2026-46703

creationtimestamp| type| source ---|---|--- 2026-05-16 10:58:07+00:00| published-proof-of-concept| https://github.com/boxlite-ai/boxlite/security/advisories/GHSA-f396-4rp4-7v2j 2026-06-11 01:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnxzmkp6552n 2026-06-11...

CVE-2026-46643

creationtimestamp| type| source ---|---|--- 2026-05-15 14:07:16+00:00| published-proof-of-concept| https://github.com/KnpLabs/snappy/security/advisories/GHSA-vpr4-p6fq-85jc...

CVE-2026-44429

The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.7, the public catalogue UI served at GET / file internal/api/handlers/v0/uiindex.html is vulnerable to stored cross-site scripting via the server.websiteUrl field of any published...