CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...

CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

UBUNTU-CVE-2026-57160

PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint in pjsip/src/pjsip/sipmsg.c, the function that serializes generic array headers such as Allow, Require, Supported, and Unsupported. Unde...

UBUNTU-CVE-2026-57165

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall handleupdown in clitelnet.c. This affects only applications that enab...

UBUNTU-CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

UBUNTU-CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

UBUNTU-CVE-2026-57164

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP client httpclient.c when buffering an HTTP response body. This affects applications that use the PJLIB-UTIL HTTP client to receive a whole...

UBUNTU-CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

UBUNTU-CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-57162

PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media transport when processing a=crypto attributes during SDP offer/answer sdesencodesdp in transportsrtpsdes.c. This affects applications with...

CVE-2026-53761

Frappe CRM , an open-source customer relationship management tool, contains an authentication bypass vulnerability in the crm/api component caused by logged invitation keys . Prior to version 1.73.0 , an unauthenticated attacker could leverage these exposed keys over the network with low complexi...

CVE-2020-13925

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:04+00:00| seen| Telegram/DGzHuk8RVb1b8Xt8Ti7JrWo03tk4z5tw950ouDC7Dv-DN4 2026-09-05 01:00:20+00:00| published-proof-of-concept| Telegram/DGzHuk8RVb1b8Xt8Ti7JrWo03tk4z5tw950ouDC7Dv-DN4...

CVE-2014-5139

creationtimestamp| type| source ---|---|--- 2026-09-04 18:00:03+00:00| seen| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww 2026-09-05 01:00:21+00:00| published-proof-of-concept| Telegram/lpcaxohlevWOQxYAX9XUMgFve84tVn0viR4d8tnkij6ww...

CVE-2026-80886

creationtimestamp| type| source ---|---|--- 2026-09-04 17:41:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dplpcwdvpdzkv...

CVE-2026-84961

creationtimestamp| type| source ---|---|--- 2026-09-04 16:49:51+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupgbb3el22w 2026-09-29 18:25:41+00:00| seen| https://bsky.app/profile/standup.thecompound.tech/post/3mwohbnt6dl2f 2026-09-30 12:01:13+00:00| seen|...

CVE-2026-85008

creationtimestamp| type| source ---|---|--- 2026-09-04 16:44:33+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupfxrlaic2w 2026-09-11 04:10:23+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117250445945300793 2026-09-11 04:20:03+00:00| seen|...

CVE-2026-85152

creationtimestamp| type| source ---|---|--- 2026-09-04 16:39:00+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mupfnuxjnc2w...

CLSA-2026-1788539811 rsync: Fix of 4 CVEs

CVE-2026-53784: resolve an absolute daemon path one component at a time with an ONOFOLLOW dirfd per level so a planted symlink cannot steer the daemon CWD outside the module when "use chroot = no" - CVE-2026-53791: require the direct peer to match the new "proxy protocol hosts" list before a...

CVE-2026-80859

In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring readiness fuseblockalloc reads fch-initialized and then fch-iouring. fch-iouring is set before fch-initialized, ordered by the smpwmb in fusechansetintialized, but fuseblockalloc h...