2436 matches found
Frappe Kanban Board whitelisted methods lack board permission checks, allowing unauthorized read and tampering
Frappe Kanban Board Whitelisted Methods Lack Board Permission Checks, Allowing Unauthorized Read and Tampering Vulnerability Overview Kanban Board in Frappe Framework exposes multiple whitelisted methods for Desk-side kanban operations. Before the fix, after loading a kanban board document, sever...
Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte
Linux kernel 6LoWPAN: off-by-one in multicast context address compression leaks a stack byte Vulnerability Overview The Linux kernel 6LoWPAN IPHC multicast context address compression path contains an off-by-one error and uses a wrong memcpy offset, corrupting the RIID field of compressed multica...
wolfSSL: undisclosed vulnerability (ZAI-2026-ZZJMHM)
Not disclosed. Details are not yet publicly disclosed...
Hickory DNS: undisclosed vulnerability (ZAI-2026-UGLPYB)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-PRK61D)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-EXL6WR)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-NTYFDY)
Not disclosed. Details are not yet publicly disclosed...
Crypto.com: undisclosed vulnerability (ZAI-2026-SOZGDM)
Not disclosed. Details are not yet publicly disclosed...
BIND9: undisclosed vulnerability (ZAI-2026-DK83DQ)
Not disclosed. Details are not yet publicly disclosed...
FFmpeg: undisclosed vulnerability (ZAI-2026-42S9BI)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-SUNNZJ)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-RCQU4U)
Not disclosed. Details are not yet publicly disclosed...
Oracle Real Application Clusters DB Home: undisclosed vulnerability (ZAI-2026-BNPM81)
Not disclosed. Details are not yet publicly disclosed...
JeecgBoot: undisclosed vulnerability (ZAI-2026-48YTJB)
Not disclosed. Details are not yet publicly disclosed...
Beyond Compare: undisclosed vulnerability (ZAI-2026-2FCVKK)
Not disclosed. Details are not yet publicly disclosed...
Frappe GDPR Personal Data Download Request ownership error leads to IDOR, allowing download of other users' PII
Frappe GDPR Personal Data Download Request Ownership Error Leads to IDOR, Allowing Download of Other Users' PII Vulnerability Overview When generating a user's personal data export file, the Personal Data Download Request feature that Frappe Framework provides for GDPR compliance failed to...
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read
Linux kernel FDDI: short frames parsed before header length validation cause out-of-bounds read Vulnerability Overview The Linux kernel FDDI receive path parses FDDI/LLC/SNAP header fields before verifying that the skb contains enough bytes, so malformed short frames can trigger an out-of-bounds...
Linux: undisclosed vulnerability (ZAI-2026-PT3XIF)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-O6GU82)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-WGYJP8)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-75JOCY)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-3S29Q5)
Not disclosed. Details are not yet publicly disclosed...
ZenTao: undisclosed vulnerability (ZAI-2026-IRUA72)
Not disclosed. Details are not yet publicly disclosed...
FreeType: undisclosed vulnerability (ZAI-2026-XEU9V5)
Not disclosed. Details are not yet publicly disclosed...
MaraDNS: undisclosed vulnerability (ZAI-2026-0CJ0FC)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-YRSAG7)
Not disclosed. Details are not yet publicly disclosed...
GStreamer: undisclosed vulnerability (ZAI-2026-OIPTPJ)
Not disclosed. Details are not yet publicly disclosed...
Nacos: undisclosed vulnerability (ZAI-2026-OIYOXV)
Not disclosed. Details are not yet publicly disclosed...
lwIP: undisclosed vulnerability (ZAI-2026-S05AIC)
Not disclosed. Details are not yet publicly disclosed...
RT-Thread: undisclosed vulnerability (ZAI-2026-RQA8QG)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-SY1D2L)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-KW26RE)
Not disclosed. Details are not yet publicly disclosed...
Linux: undisclosed vulnerability (ZAI-2026-IW13SQ)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-19YSKJ)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-8ITNC4)
Not disclosed. Details are not yet publicly disclosed...
MongoDB: undisclosed vulnerability (ZAI-2026-C1T2QW)
Not disclosed. Details are not yet publicly disclosed...
Redis: undisclosed vulnerability (ZAI-2026-CY74TK)
Not disclosed. Details are not yet publicly disclosed...
ofdrw: undisclosed vulnerability (ZAI-2026-M74AQB)
Not disclosed. Details are not yet publicly disclosed...
Remitly: undisclosed vulnerability (ZAI-2026-LWR18R)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-EAE9MC)
Not disclosed. Details are not yet publicly disclosed...
libevent: undisclosed vulnerability (ZAI-2026-03V2QU)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-2HATYU)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-IM0KO2)
Not disclosed. Details are not yet publicly disclosed...
OpenBSD: undisclosed vulnerability (ZAI-2026-W6YS7N)
Not disclosed. Details are not yet publicly disclosed...
wget2: undisclosed vulnerability (ZAI-2026-PWEC79)
Not disclosed. Details are not yet publicly disclosed...
Suricata: undisclosed vulnerability (ZAI-2026-TMHLNK)
Not disclosed. Details are not yet publicly disclosed...
Yahoo Mail: undisclosed vulnerability (ZAI-2026-9I8QZX)
Not disclosed. Details are not yet publicly disclosed...
memcached: undisclosed vulnerability (ZAI-2026-EW1SI7)
Not disclosed. Details are not yet publicly disclosed...