UBUNTU-CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

UBUNTU-CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2026-38344

A NULL pointer dereference in the getminbuffersize function /libswscale/slice.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

CVE-2026-38347

A heap overflow in the ffswsalphablendaway function libswscale/alphablend.c of FFmpeg git-master commit 722a217 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-38345

A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via a crafted input...

UBUNTU-CVE-2026-38346

An integer overflow in the yuv2planeX8c function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted video file...

UBUNTU-CVE-2026-38350

An integer overflow in the targetswsfuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

Exploit for Code Injection in Langflow

CVE-2025-3248 — Langflow Unauthenticated Remote Code Execution...

CVE-2026-51653

Incorrect access control in the getStorageCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain storage feature state information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51652

Incorrect access control in the getUPnPCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain UPnP enablement and parsed port-mapping information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51654

Incorrect access control in the getScheduleCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to obtain schedule or scheduled-reboot configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51611

CVE-2026-51611 is an incorrect access control vulnerability in the startSlaveReboot function of the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 . An unauthenticated remote attacker can send a crafted MQTT message to force an arbitrary reboot of the device. The vulnerability is rated...

PT-2026-83018

In the Linux kernel, the following vulnerability has been resolved: mm/percpu-km: fix bitmap overflow and accounting in pcpu create chunk In pcpu create chunk, nr pages is the total contiguous backing allocation, i.e., nr units pcpu unit pages, but pcpu chunk populated uses it to set...

PT-2026-82918

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free amdgpu amdkfd gpuvm free memory of gpu unpinned DOORBELL and MMIO remap BOs which are pinned at allocation time before checking whether the BO is still mapped to the GPU...

PT-2026-83024

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vmclock miscdev mmap function within the drivers/ptp/ptp vmclock.c file. This flaw allows read-only mappings to become writable, which may impact the...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: virglrenderer (UTSA-2024-005589)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005589 advisory. An out-of-bounds read in the vrendblitneedswizzle function in vrendrenderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a denial of service via...

EUVD-2026-67769

An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82988

In the Linux kernel, the following vulnerability has been resolved: riscv: drop init from vec check unaligned access speed all cpus This function runs within a kthread and need not necessarily finish before system finishes boot and free initmem unmaps the .init.text section. This function makes...

PT-2026-82863

The One User Avatar | User Profile Picture plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.4 via the wpua action process option update function. This is due to insufficient file type validation in wp handle upload called without a MIME...