23479 matches found
BIT-MONGODB-2026-13071 Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing...
CVE-2026-76039
creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:56+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819...
CVE-2026-76037
creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:31+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:24+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824 2026-08-24...
CVE-2026-74977
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:47+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-25 16:00:27+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtw6trivca2s...
CVE-2026-74973
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...
CVE-2026-74961
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:09+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 18:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtjt73o7372f...
CVE-2026-74955
creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:56+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 08:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtis2r2llg24...
MINI-3642-G93C-2VFF
Bulletin has no description...
MINI-4M25-6C6G-GXVF
Bulletin has no description...
UBUNTU-CVE-2026-62377
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...
EUVD-2026-61048
Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...
CVE-2026-50126
Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...
CVE-2026-50126 adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp) vulnerable to out-of-bounds read and NULL pointer dereference
Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...
CVE-2026-59949 yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)
yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance.hash32.hash, XXHashFactory.nativeInstance.hash64.hash,...
CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2
CVE-2026-40553 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...
MINI-F857-C9JM-X8RP
Bulletin has no description...
MINI-7328-VFHW-W2C3
Bulletin has no description...
CVE-2026-74940
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-74943
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...