CVE-2026-92454

The GUIX software JPEG decoder is vulnerable to an out-of-bounds read and a non-terminating loop when GX_SOFTWARE_DECODER_SUPPORT is enabled. The decoder fails to verify that four kinds of marker segments are long enough, causing truncated segments to be read past the end of the caller's image bu...

CVE-2026-92454 JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode

The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the end of the caller's image buffer. Separately, a zero chroma sampling factor makes the block decode loop non-terminating...

@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8. During route recognition, @angular/router fails to validate whether an auxiliary outlet segment in the URL matches a route configured for that specific outlet name...

GHSA-62VG-58RM-QFF7 @angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)

A denial of service DoS vulnerability was identified in @angular/router when Server-Side Rendering SSR is enabled on Node.js V8. During route recognition, @angular/router fails to validate whether an auxiliary outlet segment in the URL matches a route configured for that specific outlet name...

Oracle JD Edwards EnterpriseOne Orchestrator: Vulnerabilities in Permission Management and Access Control

Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 to 9.2.26.5 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the E1 IOT Orchestrator Security component. As a result, unauthenticated attackers may gain access to the...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 to 8.63 have security vulnerabilities. These vulnerabilities stem from issues with the PsAdmin component, which may allow unauthenticated attackers to access the physical communication segments connected to the execution environment,...

Oracle Siebel CRM Cloud Applications security vulnerabilities

A security vulnerability exists in Oracle Siebel CRM Cloud Applications versions 22.3 through 26.9. This vulnerability stems from issues within the Siebel Cloud Manager component and may allow unauthenticated attackers to create, delete, or modify critical data or all data, as well as access such...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server and MySQL Cluster have security vulnerabilities. These vulnerabilities stem from issues with the Server: Group Replication GCS component. Unauthorized attackers may exploit these vulnerabilities by accessing the physical communication segments connected to the hardware that ru...

Oracle Database Server security vulnerabilities

Oracle Database Server versions 23.4.0 to 23.26.3 have security vulnerabilities. These vulnerabilities stem from issues with the RDBMS components, and they could allow unauthenticated attackers to exploit the physical communication segments connected to the hardware where the RDBMS resides,...

CVE-2026-98724

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

UBUNTU-CVE-2026-98724

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-98724

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-98724 nvmet: pci-epf: reject too-short SGL segments

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-98724 nvmet: pci-epf: reject too-short SGL segments

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-98724

The Linux kernel contains a vulnerability in the nvmet driver related to pci-epf SGL segments. A host-controlled SGL segment length that is nonzero but smaller than a single SGL descriptor causes nr_descs to become zero. This leads the function nvmet_pci_epf_get_sgl_segment() to perform an out-of...

CVE-2026-98724

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-98724: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smaller than one SGL descriptor makes nrdescs zero, so nvmetpciepfgetsglsegment reads the type byte of sgls-1 outside the...

CVE-2026-111106

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...

CVE-2026-111106 Mail Mint <= 1.31.4 - Authenticated (Custom+) SQL Injection via 'filters' Parameter

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...

PT-2026-115437

The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and including, 1.31.4 This is due to insufficient escaping on the user supplied filter 'value' before it is appended to a SQL que...