490148 matches found
CVE-2026-63632
onnx versions 1.3.0–1.22.0 have an unchecked rank access in Gemm_7_6::adapt_gemm_7_6() (gemm_7_6.h:41) when downgrading opset 7→6; a Gemm node with undersized input tensors triggers a 16-byte heap-buffer-overflow READ. A working 186-byte PoC exists. Upgrade to onnx ≥1.22.0.
CVE-2026-63632 ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape
Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. From 1.3.0 until 1.22.0, onnx.versionconverter.convertversion can perform an out-of-bounds read in Gemm76::adaptgemm76 in onnx/versionconverter/adapters/gemm76.h when a Gemm node has input tensors with...
CVE-2026-59940
Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...
EUVD-2026-60825
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...
CVE-2026-73426
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.17, Trix is vulnerable to cross-site scripting when a data-trix-serialized-attributes attribute bypasses the DOMPurify sanitizer. An attacker can craft HTML containing a data-trix-serialized-attributes...
MINI-388J-RW88-R32J
Bulletin has no description...
CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1
CVE-2026-20348 affecting package clamav for versions less than 1.5.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3
CVE-2026-34502 affecting package apr-util for versions less than 1.6.3-3. A patched version of the package is available...
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5
CVE-2026-71217 affecting package iperf3 for versions less than 3.17.1-5. A patched version of the package is available...
CVE-2026-40467 affecting package gawk for versions less than 5.2.2-2
CVE-2026-40467 affecting package gawk for versions less than 5.2.2-2. A patched version of the package is available...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
MINI-C4Q8-M5PQ-CH4Q
Bulletin has no description...
MINI-75HM-F2F3-M8WR
Bulletin has no description...
MINI-5X5W-24GX-V59M
Bulletin has no description...
MINI-8FJG-W338-88H7
Bulletin has no description...
EUVD-2026-60794
Unauthenticated Bypass Vulnerability in Contact Form by Supsystic 1.10.0 versions...
MINI-5CCW-79GX-V6HR
Bulletin has no description...
EUVD-2026-60793
Unauthenticated Cross Site Scripting XSS in Contact Form by Supsystic 1.10.0 versions...
