123003 matches found
UBUNTU-CVE-2026-87875
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-82563
creationtimestamp| type| source ---|---|--- 2026-09-09 17:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cnb2awhvniswk...
CVE-2026-87875
The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...
CVE-2026-87806
creationtimestamp| type| source ---|---|--- 2026-09-09 14:07:31+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv3pjnxzam2n 2026-09-10 00:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv4rqzto6u24...
CVE-2026-79964
creationtimestamp| type| source ---|---|--- 2026-09-09 13:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/amtfxibu7p7bf...
CVE-2026-79968
creationtimestamp| type| source ---|---|--- 2026-09-09 13:40:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/abptozoryekrg...
CVE-2026-73324
Certain VLC media player builds in versions 3.0.0 through 3.0.23 contain a memory-safety vulnerability reachable when processing media from an attacker-controlled network source. Exploitation requires user interaction and may disclose a limited, layout-dependent amount of VLC process memory...
CVE-2026-65181
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
CVE-2026-65181
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
EUVD-2026-74800
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
CVE-2026-65181
Apache Impala versions 2.7.0 through 4.5.1 are vulnerable to an insufficient authorization flaw that can lead to remote code execution (RCE) . The issue stems from the fact that the driver.url and driver.class properties used in tables created with STORED BY JDBC are not checked for authorization...
CVE-2026-65181 Apache Impala: RCE via External Data Source Class Loading
Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a file to remote storage and create a table to execute arbitrary Java code. Users are recommended to upgrade to version 4.5.2, which fixes this issue...
CVE-2026-79967
creationtimestamp| type| source ---|---|--- 2026-09-09 09:58:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hhqvpzqsp4m2n...
CVE-2026-79973
creationtimestamp| type| source ---|---|--- 2026-09-09 09:46:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hqkrahgnc6b4r...
CVE-2026-16272
Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API WHMCS Module: from v9.0.0 before v9.0.3...
EUVD-2026-74769
Use of less trusted source vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Exploitation of Trusted Identifiers. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...
Malicious code in external_deps_enjoyer (npm)
Source: amazon-inspector 8d4909b60251f0448ff7bc689262f363e3ec4c2cebf82abe3eb0c7f8769931a6 package.json declares dependencies and optionalDependencies whose specifiers point at non-registry, attacker-controlled or mutable sources rather than the npm registry. Listed sources include a Discord CDN...