262017 matches found
libXfont2 PCF Font Parsing Heap Buffer Overflow
...
CVE-2026-11571
creationtimestamp| type| source ---|---|--- 2026-07-09 07:59:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq762jnkum25 2026-07-09 17:47:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6wauter26...
gstreamer1-plugins-bad-free: GStreamer: Heap buffer overflow via crafted VNC server rectangle in librfb
A heap buffer overflow vulnerability was found in GStreamer's librfb RFB/VNC client. The rectangle bounds check incorrectly validates area rather than individual dimensions, allowing a malicious VNC server to send a rectangle that extends beyond the framebuffer. A remote attacker could set up a...
EUVD-2026-42538
The Mang Board WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'stag' parameter in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
EUVD-2026-42529
Permissive Cross-Origin Resource Sharing CORS in the REST API helix-rest, org.apache.helix.rest.server.filters.CORSFilter in Apache Helix through 2.0.0 on all platforms allows a remote attacker controlling a web page visited by an authorized user to read responses from and issue cross-origin...
CVE-2026-57031
creationtimestamp| type| source ---|---|--- 2026-07-09 04:47:37+00:00| seen| https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities20260709...
CVE-2026-51536
creationtimestamp| type| source ---|---|--- 2026-07-09 03:32:56+00:00| seen| https://gist.github.com/MrAlaskan/e160c626a32e03e5d9eddaa732560672 2026-07-14 14:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmh44rhv52r...
CVE-2026-44934
creationtimestamp| type| source ---|---|--- 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mq6ov4q7ot2f 2026-07-09 03:28:04+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq6ov5pniv27...
SUSE CVE-2026-60002
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. This outcome occurs only on the client side...
GHSA-6828-FJ37-MVWR vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp, linux-vmware...
CVE-2026-53134 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp, linux-vmware...
GHSA-J22C-2H2Q-55PV vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp, linux-vmware...
GHSA-QC6F-VG59-3945 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp, linux-vmware...
GHSA-83PQ-FMF8-563Q vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp, linux-vmware...
GHSA-79CF-XCQC-C78W vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2026-31767
creationtimestamp| type| source ---|---|--- 2026-07-09 01:17:05+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...
CVE-2026-59820
creationtimestamp| type| source ---|---|--- 2026-07-09 00:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-59820 2026-07-13 16:54:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5rxa4vk2f...
CVE-2026-15138 tumf mcp-text-editor text_editor.py _validate_file_path path traversal
A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function validatefilepath of the file mcptexteditor/texteditor.py. Such manipulation of the argument filepath leads to path traversal. The attack can be launched remotely. The exploit has been...
PT-2026-57027
Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.6 Description An issue exists in the erasespamedcomments wiki action, located in actions/EraseSpamedCommentsAction.php, which allows unauthenticated users to permanently delete arbitrary wiki pages. The action...
