Agent2Agent A2A Java SDK race condition vulnerability

Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain a race condition vulnerability. This vulnerability arises from a race condition occurring during the execution of the TaskManager.saveTaskEvent function, allowing attackers to launch remote attacks...

Agent2Agent A2A Java SDK information disclosure vulnerability

Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain an information disclosure vulnerability. This vulnerability stems from improper handling of the getMessage function within the JSON-RPC Error Handler component; it may lead to information leakage via error messages, allowing...

ggml llama.cpp improper exception handling vulnerability

ggml llama.cpp versions 0.7.0 and earlier contain a vulnerability related to improper exception handling. This vulnerability arises because an unknown function within the file src/llama-sampler.cpp in the Mirostat Sampler component triggers a reachability assertion during processing; attackers ca...

Libimobiledevice buffer error vulnerability

Versions 1.4.0 and earlier of libimobiledevice contain a security vulnerability. This vulnerability stems from a double free in the servicereceive function within the src/afc.c file of the AFC Service component, potentially enabling remote attacks...

Intern Science InternAgent software supply chain issue vulnerability

Version 1.5.0 of Intern Science InternAgent contains a vulnerability related to the software supply chain. This vulnerability stems from improper handling of the basemodelnameorpath parameter in the train function within the file tasks/AutoChem/code/experiment.py. It may allow unauthorized...

Jackrong LLM Fine-Tuning Guide path traversal vulnerability

The Jackrong LLM Fine-Tuning Guide contains a path traversal vulnerability. This vulnerability stems from the operation of the parameter “shardname” by the extractmtpheads function in the qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py file within the MTP weightmap Handler component. It may lead to...

H3C Magic NX15 Buffer Error Vulnerability

The H3C Magic NX15 NX15V100R017 version has a buffer overflow vulnerability. This vulnerability stems from incorrect operations on the sub416874 function located in the /usr/bin/usrlist file. It may lead to a stack buffer overflow and allow for remote attacks...

Artifex MuPDF buffer error vulnerability

Artifex MuPDF versions 1.28.5 and earlier have a security vulnerability. This vulnerability stems from the freecharlist function in the Signature Locking component, where there is a double release of resources, which may lead to remote attacks...

Astra Linux – vulnerability in libtirpc

In libtirpc versions prior to 1.3.3rc1, remote attackers could exhaust the file descriptors of a process using libtirpc, as idle TCP connections were mishandled. This, in turn, could result in an svcrun infinite loop without accepting new connections...

PT-2026-69300

Name of the Vulnerable Software and Affected Versions nxp-auto-goldvip gvip versions prior to 1.13.0 Description Improper access controls exist within the Lambda Function Handler component, specifically affecting the SitewiseCustomFunction function. This issue stems from an IAM permission...

CVE-2026-56787

RTKLIB through 2.4.3 contains an off-by-one out-of-bounds read vulnerability in the decodessr3 function at src/rtcm3.c:1446 that allows remote attackers to trigger a global buffer overflow via crafted RTCM3 SSR messages with attacker-controlled signal mode fields. Remote attackers can exploit thi...

Adobe Experience Manager XSS

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

Taier authorization issue vulnerability

Taier is a distributed scheduling system open source by DTStack. It aims to reduce the costs of ETL processes, clarify complex dependencies between tasks, and lower labor costs related to submission, scheduling, and operations. Versions of Taier 1.4.0 and earlier have vulnerabilities related to...

389 Directory Server: Improper exception handling vulnerability

389 Directory Server is an open-source implementation of a highly available, fully functional, reliable, and secure LDAP server. There is a code vulnerability in 389 Directory Server, which stems from the control plugin’s failure to check for allocation failures before using BER structures. This...

Dolibarr ERP CRM security vulnerabilities

Dolibarr ERP CRM is an open-source enterprise and sales management system developed by Dolibarr. Versions of Dolibarr ERP CRM prior to 23.0.2 contain security vulnerabilities. These vulnerabilities stem from unauthorized permissions granted to unknown functions in the...

SourceCodester Barangay Resident Profiling and Information Management System Trust Management Vulnerabilities

The SourceCodester Barangay Resident Profiling and Information Management System is an open-source system developed by SourceCodester for managing profiles and information of Barangay residents. Version 1.0 of the SourceCodester Barangay Resident Profiling and Information Management System contai...

SourceCodester Inventory System Cross-site Scripting Vulnerabilities

The SourceCodester Inventory System is an open-source inventory system developed by SourceCodester. Version 1.0 of the SourceCodester Inventory System has a cross-site scripting vulnerability. This vulnerability stems from operations in the file header.php, which may lead to cross-site scripting...

CodeAstro Payroll System Injection Vulnerability

The CodeAstro Payroll System is a payroll management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Payroll System has a SQL injection vulnerability. This vulnerability arises from an unknown function in the /homesalary.php file, which improperly handles the parameters...

Itsourcecode Hospital Management System injection vulnerability

itsourcecode Hospital Management System is an open-source hospital management system developed by itsourcecode. Version 1.0 of itsourcecode Hospital Management System has a vulnerability related to SQL injection, which stems from the handling of the admissiontime parameter in the addpatient.php...

Serialization security vulnerabilities

Serialization is a data serialization and deserialization tool open source from Boost.org. Versions of serialization 1.91 and earlier have security vulnerabilities. These vulnerabilities stem from improper input validation by unknown functions for specified types, which may lead to remote attacks...