CVE-2026-11319

The TickTick Android application (com.ticktick.task) version 8.2.2.0 is vulnerable to a path traversal vulnerability within its exported ShareReceiveActivity . A malicious local application can trigger this by sending a crafted content:// URI via ACTION_SEND intents. The root cause is the unsanit...

CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity

TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...

EUVD-2026-104525

TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...

CVE-2026-11319 TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity

TickTick Android application com.ticktick.task 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to write files outside the intended attachment directory by supplying a crafted content:// URI with a traversal filename vi...

CVE-2026-98456

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition in the readunconfindexlist function allows a local user to cause an out-of-bounds write during asynchronous controller setup. This issue occurs when device state flags change between response buffer sizing and data...

CVE-2026-70007

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the target system over the network. By convincing a user to process specially crafted input, an attacker can trigger memory corruption and compromise the affected...

CVE-2026-10758

A flaw was found in LERC. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by submitting specially crafted image data to an application using the library. Processing the malicious input triggers an integer overflow that leads to an out-of-bounds memory...

OPENSUSE-SU-2026:22134-1 Security update for gh

This update for gh fixes the following issues: Changes in gh: - Update to version 2.102.0, fixing four security issues GHSA-39wj-f2f4-978v, GHSA-4mq3-hpgx-9cx8, GHSA-qcwj-mr2r-2cx7, GHSA-wjmr-j3rp-mh2g: gh release/run/attestation download and repo read-file --output could write to an unintended...

CVE-2026-12660

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660 IBM MQ Path Traversal

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

EUVD-2026-104466

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660 IBM MQ Path Traversal

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660

The IBM MQ Web Console is vulnerable to a path traversal issue (CWE-22) caused by improper path validation . This flaw could allow an authenticated administrator to write files outside the intended directory. The CVSS 3.1 base score is 2.7 (Low) , with an integrity impact of low and no impact on ...

CVE-2026-111045

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path ...

Python Packaging Authority virtualenv post-link vulnerability

The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because the built-in creator calls ensuredir when handling executable files, libraries, and package directories; it accepts existing symbolic links pointing to...

Python Packaging Authority virtualenv post-link vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a post-release vulnerability. This vulnerability stems from the handling of errors during the safedelete function’s deletion operations. When deletion fails, the error handling code uses os.lstatpath to read the file mode...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple tvOS versions prior to 27, Apple visionOS versions prior to 27, and Apple watchOS versions prior to 27 have a buffer error vulnerability. This vulnerability stems from improper...

Eclipse ThreadX – NetX Duo input validation vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a security vulnerability. This vulnerability stems from the X.509 parser in NetX Secure accepting RSA public keys of arbitrary size and decrypting them into a fixed-size buffer. Certificates with larger modulus values may lead to...

Apple macOS Buffer Error Vulnerability

Apple macOS Sequoia versions prior to 15.8 and macOS Tahoe versions prior to 26.7 have a buffer error vulnerability. This vulnerability stems from an out-of-bounds write issue, which may cause the application to terminate unexpectedly...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...