308147 matches found
Vim: Stack Buffer Overflow in the Vim Socket Server
...
PT-2026-72562
In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incomi...
VulnCheck KEV: CVE-2021-2109
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...
PT-2026-73054
siyuan versions = 3.7.3 fixed in v3.7.4 contain a server-side template injection vulnerability in the attribute-view Template calculation feature introduced in v3.7.0-beta.1. The feature's template engine uses Sprig's unmodified function map, which still exposes the env, expandenv, and...
PT-2026-72410
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sunrpc component of the Linux kernel affecting TLS-enabled NFS servers. A race condition occurs during the asynchronous TLS handshake when a connection is closed,...
SUSE CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-55157
creationtimestamp| type| source ---|---|--- 2026-08-14 22:35:05+00:00| published-proof-of-concept| https://github.com/ooples/token-optimizer-mcp/security/advisories/GHSA-49mq-fc6q-3h46...
CVE-2026-48804
A flaw was found in python-socketio, a Python implementation of the Socket.IO realtime client and server. The server stores binary messages in memory while awaiting their attachments. A remote attacker can exploit this by sending a binary message and deliberately withholding some attachments. Thi...
CVE-2026-53708
creationtimestamp| type| source ---|---|--- 2026-08-14 20:35:03+00:00| published-proof-of-concept| https://github.com/IBM/mcp-context-forge/security/advisories/GHSA-9hgc-g3w5-67cm...
CVE-2026-73653 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
GO-2026-6179 vulnerabilities
Vulnerabilities for packages: containerd, kots, nerdctl, langfuse-fips, prometheus-mongodb-exporter, aactl, upwind-agent, cilium, k3d, zot, reports-server, helm, langfuse, spire-server, snyk-cli, kyverno, kube-conformance, k8s-device-plugin, falco-no-driver, k3s, nemo, cert-manager,...
GO-2026-6180 vulnerabilities
Vulnerabilities for packages: containerd, kots, nerdctl, langfuse-fips, prometheus-mongodb-exporter, aactl, upwind-agent, cilium, k3d, zot, reports-server, helm, langfuse, spire-server, snyk-cli, kyverno, kube-conformance, k8s-device-plugin, falco-no-driver, k3s, nemo, cert-manager,...
CVE-2026-56864 vulnerabilities
Vulnerabilities for packages: containerd, kots, nerdctl, langfuse-fips, prometheus-mongodb-exporter, aactl, upwind-agent, cilium, k3d, zot, reports-server, helm, langfuse, spire-server, snyk-cli, kyverno, kube-conformance, k8s-device-plugin, falco-no-driver, k3s, nemo, cert-manager,...
CVE-2026-56865 vulnerabilities
Vulnerabilities for packages: containerd, kots, nerdctl, langfuse-fips, prometheus-mongodb-exporter, aactl, upwind-agent, cilium, k3d, zot, reports-server, helm, langfuse, spire-server, snyk-cli, kyverno, kube-conformance, k8s-device-plugin, falco-no-driver, k3s, nemo, cert-manager,...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: unleash, langfuse-fips, pelias-api, unleash-fips, vitess, gitlab-rails-ce-fips, nextcloud-server, authentik-fips, librechat, langfuse, gitlab-rails-ce, homepage, keep-fips, cadence-web, jitsucom-jitsu, authentik, semaphore, arangodb, keep...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: nextcloud-server, jitsucom-jitsu, vitess, langfuse...
CVE-2026-49457
erlangquic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname was not compared against the certificat...
CVE-2026-73844
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server is pointed at or redirected/SSRF'd to a host that returns a...
CVE-2026-73846
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, canonicalizeParams in src/utils/cache.ts serializes request parameters with unescaped ampersand, equals-sign, and vertical-bar delimiters, allowing different logical parameter sets used by buildCacheKey to collide an...
CVE-2026-73845
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the ckangetmqaquality and ckangetmqaqualitydetails tools in src/tools/quality.ts use isValidMqaServer to validate the serverurl parameter with a prefix-only regular expression for dati.gov.it, allowing suffix-host an...