490244 matches found
CVE-2026-6244 affecting package libpcap for versions less than 1.10.7-1
CVE-2026-6244 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...
OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree
Summary The @typespec/openapi3 emitter retains the value of a @versioned enum member and interpolates it into the output filename as version without sanitizing path separators or traversal components. The completed path reaches the compiler's emitFile, which creates the parent directory and write...
CVE-2026-78738
Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...
CVE-2026-30754
A memory corruption vulnerability exists in FFmpeg before 8.1. The RTP encoding process. In the nalsend function in libavformat/rtpench264hevc.c, a negative size parameter size=-3 is passed to memcpy when transmitting H.264/HEVC streams via RTP using a crafted input file. This was detected using...
CVE-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
EUVD-2026-74051
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function iswithinroots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
CVE-2026-82537 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a command string with an allowlisted word...
CVE-2026-79721
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...
GHSA-57V5-WQX3-CGJ4 SiYuan: Database view structure (all view names, layout types and per-field visibility) is returned to anonymous readers by /api/av/getAttributeViewFieldViews
Scope note please read first This endpoint does not exist in v3.7.3 or on master. It was introduced on the development branch by commit acfc02ee8 "Improve database field visibility across views", 11020 and is live on v3.7.4-alpha.1, so it will ship in v3.7.4 unless gated first. No released stable...
CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
python: Python stringprep module: Incorrect domain name processing breaks IDNA interoperability
A flaw was found in the Python 'stringprep' module. This module incorrectly processed characters by using the latest Unicode codepoint attributes instead of the Unicode 3.2.0 standard specified in RFC 3454. This deviation can lead to mismatches when processing internationalized domain names IDNA...
2026-09 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5122876)
2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5122876...
2026-09 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5122878)
2026-09 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5122878)
2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5122878...
2026-09 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5123099)
2026-09 Cumulative Update for Windows 10 Version 1607 for x64-based Systems KB5123099...
2026-09 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5123099)
2026-09 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5123099...
CVE-2026-84387
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...