605803 matches found
ROS-20260910-73-0160
The vulnerability of the xmtnodestart function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing an incorrect XMT scene, allows a violator to trigger a service failure...
ROS-20260910-73-0168
The vulnerability of the gfxmlsaxpeeknode function in the MP4Box utility of the GPAC multimedia platform, which is related to buffer overflows in dynamic memory during processing of incorrect XMT scenes, allows a hacker to cause a service failure...
ROS-20260910-73-0165
The vulnerability of the compositormpeg4getSensorHandlerEx function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of using a null pointer during processing of incorrect XMT scenes, allows a malicious actor to cause service failure...
The vulnerability of the Actor.name_email_regex() function in the Python library for interacting with Git repositories in GitPython allows a malicious actor to trigger a denial-of-service attack.
The vulnerability of the Actor.nameemailregex function in the Python library for interacting with Git repositories in GitPython is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow a malicious actor to cause service...
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 , caused by insufficient validation of file-controlled OLE summary offsets. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, low complexity, no privileges required, no user interaction, and ...
PT-2026-89581
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype by advertising crafted ref names containing ' proto ' path segments during ref negotiation. Attackers controlling a Git...
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-2131)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2131 advisory. Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context.A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function...
Unity Linux 20.1060a / 20.1070a Security Update: glib2 (UTSA-2026-039481)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-039481 advisory. A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service DoS via an integer overflow in GLib's GIO GLib Input/Output...
Linux Distros Unpatched Vulnerability : CVE-2026-87933
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation...
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
PT-2026-89587
An out-of-bounds read vulnerability exists in the xls dumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...
PT-2026-89736
Alt Text Endpoint Authorization Bypass via Payload Local API overrideAccess Omission Summary @jhb.software/payload-alt-text-plugin v0.7.0 exposes custom Payload CMS endpoints POST /api/alt-text-plugin/generate and /bulk that call the Payload Local API findByID and update without setting...
PT-2026-89586
A heap-buffer-overflow and use-after-free vulnerability exists in the xls getCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
EUVD-2026-75745
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
Important: containerd
Issue Overview: Fix GHSA-p7v4-vr35-mj6f; containerd CRI plugin: Checkpoint restore bypasses destination security context. A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component...
CVE-2026-79591
A heap-buffer-overflow and use-after-free vulnerability exists in the xlsgetCSS function of libxls 1.6.3 due to insufficient validation of a file-controlled font index...
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik RouterOS contains a missing authentication for critical function vulnerability which allows kernel memory disclosure and denial of service in the btest service...