CVE-2026-49361

CVE-2026-49361: Apache Fluss Netty frame-decoder memory exhaust vulnerability . Affected: Apache Fluss (incubating) versions prior to 0.9.1 (0.8.0 and 0.9.0). Root cause: Netty LengthFieldBasedFrameDecoder configured with Integer.MAX_VALUE as the maximum frame length. Impact: unauthenticated remo...

LibreChat 跨站脚本漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. A cross-site scripting vulnerability exists in LibreChat 0.8.0 and earlier versions that stems from an unhandled JSON parsing error that could lead to a cross-site scripting attack...

PT-2024-3152 · Unknown · Cornerstone

Name of the Vulnerable Software and Affected Versions: Cornerstone versions through 0.8.0 Description: The issue is related to improper neutralization of input during web page generation, which can lead to cross-site scripting attacks. This allows a remote attacker to conduct reflected XSS attack...

WordPress plugin Comment Guestbook 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

libavif 缓冲区错误漏洞

libavif is a library for encoding and decoding .avif files. libavif suffers from a security vulnerability that stems from libavif 0.8.0 and 0.8.1 having an out-of-bounds write in the avifDecoderDataFillImageGrid. no details of the vulnerability are currently available...

GPAC code issue vulnerability (CNVD-2020-00525)

GPAC is an open source multimedia framework. A code issue vulnerability exists in the 'gfisomdump' function of the isomedia/boxdump.c file in GPAC versions 0.8.0 and 0.9.0-development-20191109. The vulnerability stems from an improperly designed or implemented code development process for a...