90769 matches found
CVE-2026-24081: Buffer Over-read
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled...
CVE-2026-25281: Allocation of Resources Without Limits or Throttling
Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...
CVE-2026-25290: Integer Overflow or Wraparound
Memory Corruption when validating large data buffers from external sources using addition to check buffer length...
CVE-2026-25282: Out-of-bounds Read
Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...
CVE-2026-24075: Buffer Over-read
Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions...
CVE-2026-92919: Improper Limitation of a Pathname to a Restricted Directory
admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the configured storage directory and overwrite...
CVE-2026-73999: Authorization Bypass Through User-Controlled Key
Contributor Insecure Direct Object References IDOR in Cooked = 1.16.0 versions...
CVE-2026-24073: Out-of-bounds Write
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...
CVE-2026-24074: Out-of-bounds Write
Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations...
CVE-2026-25280: Out-of-bounds Write
Memory corruption when processing escape handling flow with insufficient user buffer sizes...
CVE-2025-59607: Untrusted Pointer Dereference
Memory Corruption when copying large input data exceeds normal allocation limits...
CVE-2026-66571: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Asset CleanUp: Page Speed Booster = 1.4.0.5 versions...
CVE-2026-66631: Improper Neutralization of Special Elements used in an SQL Command
Administrator SQL Injection in MC Woocommerce Wishlist = 1.9.21 versions...
CVE-2026-66572: Improper Neutralization of Input During Web Page Generation
Contributor Cross Site Scripting XSS in JetBlog = 2.4.10 versions...
CVE-2026-25275: Buffer Over-read
Transient DOS when processing authentication frames with invalid FILS information element header lengths...
CVE-2026-78528: Missing Authorization
Unauthenticated Broken Access Control in BerqWP = 4.1.15 versions...
CVE-2026-66676: Missing Authorization
Unauthenticated Broken Access Control in Easy Invoice = 2.3.8 versions...
CVE-2026-66580: Improper Neutralization of Special Elements used in an SQL Command
Contributor SQL Injection in Product Feed Manager = 7.12.0 versions...