37224 matches found
EUVD-2026-5692
A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqnchart of the file fmcp/mplmcp/core/eqnchart.py. Performing a manipulation of the argument equations results in code injection. It is possible to initiate...
CVE-2026-1977
A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualizedata. Such manipulation of the argument vegalitespecification leads to code injection. The...
EUVD-2026-5601
A security vulnerability has been detected in isaacwasserman mcp-vegalite-server up to 16aefed598b8cd897b78e99b907f6e2984572c61. Affected by this vulnerability is the function eval of the component visualizedata. Such manipulation of the argument vegalitespecification leads to code injection. The...
CVE-2026-25541
Bytes is a utility library for working with bytes. From version 1.2.1 to before 1.11.1, Bytes is vulnerable to integer overflow in BytesMut::reserve. In the unique reclaim path of BytesMut::reserve, if the condition "vcapacity = newcap + offset" uses an unchecked addition. When newcap + offset...
[SECURITY] Fedora 42 Update: pgadmin4-9.11-3.fc42
pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...
Fedora 42 : phpunit8 (2026-8a7678fa99)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8a7678fa99 advisory. Version 8.5.52 - 2026-01-27 Changed To prevent Poisoned Pipeline Execution PPE attacks using prepared .coverage files in pull requests, a PHPT test will no...
PT-2026-6685
Name of the Vulnerable Software and Affected Versions abhiphile fermat-mcp versions prior to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a Description A code injection issue exists in the eqn chart function within the fmcp/mpl mcp/core/eqn chart.py file. Manipulation of the equations argument can lead...
The vulnerability of the `ftrace_module_enable()` function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, allows a malicious actor to cause a service failure.
The vulnerability of the ftracemoduleenable function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the hfsplus_iget() function in the fs/hfsplus/super.c module, which supports the Apple HFS extended file system, allows a hacker to cause a service failure.
The vulnerability of the hfsplusiget function in the fs/hfsplus/super.c module, which supports the Apple HFS extended file system, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the f2fs_alloc_nid() function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the f2fsallocnid function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-43733
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the caif serial component of the Linux kernel. A race condition occurs between the ldisc close function and packet transmission. Specifically, ldisc clos...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei. Huawei EMUI is a mobile operating system developed based on Android. Huawei HarmonyOS is an operating system that provides a full-scenario distributed operating system based on a microkernel. Both Huawei EMUI and...
PT-2026-43831
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kref leak exists in the SUNRPC component. In the gss alloc msg function, a kref get&gss auth-kref call was implemented to balance the gss put auth operation performed in gss release ms...
The vulnerability of the machine_crashnonpanic_core() function in the arch/arm/kernel/machine_kexec.c module, which is part of the ARM kernel support for the Linux operating system, allows a malicious actor to cause a system failure.
The vulnerability of the machinecrashnonpaniccore function in the arch/arm/kernel/machinekexec.c module of the Linux operating system’s ARM kernel support module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to trigger a servic...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a concurrency issue in the graphical module’s reutilization...
The vulnerability of the ext4_prepareInline_data() function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4prepareInlinedata function in the fs/ext4/inline.c file of the Ext4 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the multiq3_attach() function in the drivers/comedi/drivers/multiq3.c module allows attackers to cause a service failure for Linux operating system-based data collection devices.
The vulnerability of the multiq3attach function in the drivers/comedi/drivers/multiq3.c module, which supports Linux kernel-based data collection devices, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the ghes_do_proc() function in the drivers/acpi/apei/ghes.c module of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the ghesdoproc function in the drivers/acpi/apei/ghes.c module of the ACPI driver an extended configuration and power management interface in the Linux kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to...
python311-wheel-0.46.3-1.1 on GA media (moderate)
python311-wheel-0.46.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:10151-1 Rating: moderate Cross-References: CVE-2026-24049 CVSS scores: CVE-2026-24049 SUSE : 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H CVE-2026-24049 SUSE : 7.2...
