16213 matches found
Nokogiri: Possible Use-After-Free when setting an attribute value via `Nokogiri::XML::Attr#value=` or `#content=`
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
Bluetooth: MGMT: validate advertising TLV before type checks
...
bpf: Fix OOB in pcpu_init_value
...
net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
...
batman-adv: tvlv: reject oversized TVLV packets
...
CVE-2026-12399
The Gutenverse WordPress plugin (Blocks, Page Builder & Site Editor) is affected by a Stored Cross-Site Scripting vulnerability up to version 3.8.0. The issue arises from insufficient input sanitization and output escaping in admin settings, allowing authenticated users with editor-level permissi...
CVE-2026-12399 Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter
The Gutenverse – WordPress Blocks, Page Builder & Site Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.8.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
ffmpeg:ffmpeg_dem_W64_fuzzer: Use-of-uninitialized-value in ff_adts_header_parse
Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6429204661731328 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemW64fuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type:...
[SECURITY] Fedora 43 Update: openbao-2.5.5-1.fc43
Openbao secures, stores, and tightly controls access to tokens, passwords, certificates, API keys, and other secrets in modern computing. Openbao handles leasing, key revocation, key rolling, and auditing. Through a unified API, us ers can access an encrypted Key/Value store and network...
OSV-2026-970 Use-of-uninitialized-value in ogs_cpystrn
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527978938 Crash type: Use-of-uninitialized-value Crash state: ogscpystrn ogsnas5gsdecodednn ogsnas5gsdecodepdusessionestablishmentaccept...
PT-2026-56121
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=527978938 Crash type: Use-of-uninitialized-value Crash state: ogs cpystrn ogs nas 5gs decode dnn ogs nas 5gs decode pdu session establishment accept...
The vulnerability of the c6xdigio_attach() function in the drivers/comedi/drivers/c6xdigio.c module, which supports Linux kernel-based data collection devices, allows a attacker to cause a service failure.
The vulnerability of the c6xdigioattach function in the drivers/comedi/drivers/c6xdigio.c module related to Linux kernel device support involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in playlist operations. An attacker can access or delete other users' playlists, and probe for the existence of arbitrary files by supplying a crafted base64-encoded...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in playlist operations. An attacker can access or delete other users' playlists, and probe for the existence of arbitrary files by supplying a crafted base64-encoded...
EUVD-2026-38054
PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option...
Relyra SAML SignatureValue not cryptographically verified -> authentication bypass
Summary Relyra 1.0.0 and 1.1.0 accept forged SAML signatures because SignatureValue was not cryptographically verified before the library returned a successful authentication result. Details In 1.0.0 and 1.1.0, the XMLDSig trust boundary was incomplete. :publickey.verify over the exclusive-C14N...
EUVD-2026-37950
Relyra SAML SignatureValue not cryptographically verified - authentication bypass...
CVE-2026-53311
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with KMSAN, where lookupopen calls dalloc, followed by drevalidate, as shown...
DEBIAN-CVE-2026-53311
In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fusedentryrevalidate fusedentryrevalidate may be called with a dentry that didn't had -dtime initialised. The issue was found with KMSAN, where lookupopen calls dalloc, followed by drevalidate, as shown...