CVE-2026-3950

CVE-2026-3950 affects strukturag libheif up to 1.21.2. The issue occurs in Track::load (libheif/sequences/track.cc, stsz/stts) and causes an out-of-bounds read. Exploitation requires local access; exploit code is publicly available. A patch exists but is unofficial/not officially approved. Remedi...

CVE-2026-3950 strukturag libheif stsz/stts track.cc load out-of-bounds

A vulnerability was identified in strukturag libheif up to 1.21.2. This impacts the function Track::load of the file libheif/sequences/track.cc of the component stsz/stts. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit is publicly available and...

libheif 缓冲区错误漏洞

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of Struktur that include LibHEIF 1.21.2 and earlier contain a buffer error vulnerability. This vulnerability stems from incorrect operations in the Track::load function with...

OpenEMR 跨站脚本漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.1 contained a cross-site...

PT-2026-24846

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, track/item names from the Track Anything feature are stored from user input POST and later rendered in Dygraph charts titles/labels using innerHTML or equivalent without...

GHSA-WJ89-2385-GPX3 Craft Commerce has stored XSS in Inventory Location Name

Summary A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript. This XSS triggers when an administrator or user with product editing permissions creates or...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: druid, akhq, confluent-kafka, cassandra-reaper, spark, solr, kafka, apache-tika, trino, zookeeper, dependency-track, strimzi-kafka-operator, cloudwatch-exporter...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: druid, akhq, confluent-kafka, cassandra-reaper, spark, solr, kafka, apache-tika, trino, zookeeper, dependency-track, strimzi-kafka-operator, cloudwatch-exporter...

CVE-2025-11143 vulnerabilities

Vulnerabilities for packages: neo4j, confluent-kafka-jre-bcfips, cassandra-reaper, akhq, apache-tika, cruise-control-fips, cloudwatch-exporter, trino, apache-hop-fips, spark-kubernetes-operator-fips, zaproxy, druid, spark, reposilite, spark-kubernetes-operator, zookeeper-fips, kafka-fips,...

GHSA-WJPW-4J6X-6RWH vulnerabilities

Vulnerabilities for packages: neo4j, confluent-kafka-jre-bcfips, cassandra-reaper, akhq, apache-tika, cruise-control-fips, cloudwatch-exporter, trino, apache-hop-fips, spark-kubernetes-operator-fips, zaproxy, druid, spark, reposilite, spark-kubernetes-operator, zookeeper-fips, kafka-fips,...

PT-2026-24640

Summary A stored XSS vulnerability exists in the Commerce Settings - Inventory Locations page. The Name field is rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript. This XSS triggers when an administrator or user with product editing permissions creates or...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: opensearch, akhq, jenkins-plugin-manager, jenkins, apache-tika, zookeeper, sonarqube, solr, spark, apache-nifi, scala, ruby4.0-jrjackson, thingsboard, zipkin, management-api-for-apache-cassandra-5.0, celeborn, apicurio-registry, kserve-modelmesh, cass-config-builder,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: neo4j, jenkins-plugin-manager, ontop-fips, jenkins, apache-pulsar-fips, kafka-bridge, akhq, opensearch-fips, trino, camunda, kserve-modelmesh, pinot, tritonserver-backend-vllm-cuda-13.0, zookeeper, sonarqube, nextflow, wavefront-proxy,...

PT-2026-24799

Name of the Vulnerable Software and Affected Versions strukturag libheif versions up to 1.21.2 Description A flaw exists in strukturag libheif, specifically within the Track::load function located in the libheif/sequences/track.cc file, related to the stsz/stts component. This can lead to an...

CVE-2026-1219

CVE-2026-1219 affects the WordPress plugin MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar. Versions 4.0–5.10 are exposed to an Insecure Direct Object Reference via load_track_note_ajax due to missing validation on a user-controlled key, allowing unauthenticated access to privat...

PT-2026-20776

The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 4.0 to 5.10 via the 'load track note ajax' due to missing validation on a user controlled key. This makes it possible for unauthenticated...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

CVE-2026-25676

The installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with administrator privileges...

Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries

Overview The installer of M-Track Duo HD provided by M-Audio contains the following vulnerability with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-25676 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc...

CVE-2026-25676

CVE-2026-25676 affects the M-Track Duo HD installer (version 1.0.0). The issue arises from insecure DLL search path handling, which may allow loading of arbitrary DLLs and lead to code execution with administrator privileges. The description does not specify affected products beyond this installe...